From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Sat, 9 Jul 2011 00:34:42 +0200 (CEST) Received: from gatewagner.dyndns.org (84-74-166-21.dclient.hispeed.ch [84.74.166.21]) by v4.tansi.org (Postfix) with ESMTPA id C0059205E7B for ; Sat, 9 Jul 2011 00:34:42 +0200 (CEST) Date: Sat, 9 Jul 2011 00:34:41 +0200 From: Arno Wagner Message-ID: <20110708223441.GA30667@tansi.org> References: <20110708211100.GB26099@tansi.org> <4E177F17.5060303@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4E177F17.5060303@redhat.com> Subject: Re: [dm-crypt] Note: Characters inadvisable in Passphrases List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On Sat, Jul 09, 2011 at 12:05:11AM +0200, Milan Broz wrote: > On 07/08/2011 11:11 PM, Arno Wagner wrote: > > > So it is highly advisable to stay within the 94 printable > > characters on the standard, 128 character ASCII table. The > > table can e.g. be found here: http://en.wikipedia.org/wiki/ASCII > > These suggestions also highly depends on environment (e.g. keyboard map). Not so bad, since then you can still put the passphrase into a file using a hex-editor and read it from there if you stay in ASCII 7 Bit. If you do not know the original encoding, that can be a problem or at least take a lot of experimenting. > (An example of local problem is if using Czech/English keyboard switch > ("password1234 is not password+??????") or with qwerty/qwertz layout > and suggestions like "try to not use y/z in passphrase to avoid the problem". > > Another common problem is "please check that you have NumLock > switched on when entering digits". > > Of course, 5 of 4 admins likes late night calls from users crying > "my password doesn't work!"... :-) Indeed. > That said, there is no limitation in cryptsetup or dmcrypt regarding > input character set. > > All these suggestions are quite generic and are intended to prevent > problem with different environments (locales, keyboard layout etc). > > (My suggestion is better use longer non-dictionary ascii-friendly > passphrase than using non-ascii characters in it. But if you > disagree, just ignore this suggestion - it will work.... until > you need to unlock external drive on system with foreign keyboard > and locales... :-) I completely agree. :-) Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier