From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tansi.org (ns.km10532-04.keymachine.de [87.118.102.195]) by mail.saout.de (Postfix) with ESMTP for ; Thu, 19 Aug 2010 15:54:56 +0200 (CEST) Received: from gatewagner.dyndns.org (84-74-164-239.dclient.hispeed.ch [84.74.164.239]) by tansi.org (Postfix) with ESMTPA id 75CA81218463 for ; Thu, 19 Aug 2010 15:54:56 +0200 (CEST) Date: Thu, 19 Aug 2010 15:54:55 +0200 From: Arno Wagner Message-ID: <20100819135455.GB18960@tansi.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Subject: Re: [dm-crypt] luksFormat Password Entropy List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de Without looking at the details, the passphrase/password is basically hashed and hashing to concentrate entropy is something that works very well. So, no difference. Incidentially, while 2.) has less entropy per bit, it does not have less entropy per symbol (the whole password). If you just say "entropy", in crypto that usually means the entropy of the whole password/passphrase as it is perceived as one "symbol". Confusing, I know and the respective communities all think the usage is clear. Arno On Wed, Aug 18, 2010 at 04:11:51PM -0400, Michael Matczynski wrote: > For luksFormat, is there a difference in password strength between the > following two passwords? > > 1.) <256bitsecret> > > 2.) <256bitsecret> | base64 > > Does the use of PBKDF2 make the longer but less entropy password #2 > equivalent to #1? > > Thanks! > Mike > > > -- > Michael Matczynski > e: mjm@alum.mit.edu > w: www.zingtech.com > w: www.catchwine.com > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt > -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier