GPG keys for multiple email accounts

Heinz Diehl htd at fritha.org
Sun Jul 7 09:42:59 CEST 2013


On 07.07.2013, Hauke Laging wrote: 

> Even with the default settings a 19-digits passphrase (upper and lower case 
> ASCII letters and digits) is as hard as AES (without flaws).

When you take all printable ASCII-chars as "headroom", with

 B = entropy in bits
 L = length of the passphrase
 P = amount of possible chars ("headroom")

then 

 B = (L*log P / log2) 

will calculate your passwords entropy in bits. Your 19-chars password
accounts for 124 bits of entropy, which is nearly half of AES-256's
strength (there are P^L different passwords). One assumes that in most
cases, trying 50% of all possible passwords will lead to success).




More information about the Gnupg-users mailing list