• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Archiving Password

X

xdivenx

[H]ard|Gawd
Joined
Mar 4, 2008
Messages
1,941
I didn't know where to put this, but since it is storage, ill try here first.

I have been recently encrypting some of my storage files, using 7z. With AES 256, is a password containing 9 numbers and 7 letters mixed together, all lowercase enough to be secure?
 
Should be -- as long as its not a word or a simple variation of a word. Its very difficult to crack open an encrypted archive, and the one's I've seen are simple brute force / dictionary crackers.
 
Yeah, nothing in a dictionary is part of my pass...Thanks for the reassurance!
 
Do not forget about rainbow table attacks also. 16 digits is a little short for someone who really really wants the data. I have a MD5 rainbow table that covers alphanumeric and special chars up to 32 digits in length.

But once again, it depends on how valuable the data is.
 
Its not that valuable, just stuff about weather balloons and forests.
 
Python said:
Do not forget about rainbow table attacks also. 16 digits is a little short for someone who really really wants the data. I have a MD5 rainbow table that covers alphanumeric and special chars up to 32 digits in length.

But once again, it depends on how valuable the data is.
Click to expand...

AES vs MD5 isn't really a valid comparison.
 
Volkum said:
AES vs MD5 isn't really a valid comparison.
Click to expand...

AES is the actual encryption algorithm. A hashing algorithm is used on the user password to generate the key used by AES. I think 7z uses SHA-256 for that.
 
pallesen said:
AES is the actual encryption algorithm. A hashing algorithm is used on the user password to generate the key used by AES. I think 7z uses SHA-256 for that.
Click to expand...

Right. SHA-2 (256) is relatively secure as opposed to earlier SHA algorithms and definitely more secure than MD5 (which you can easily find rainbow tables for).

I wouldn't worry about anybody trying to look up your SHA-2 hash in order to crack the archive...at least not at this time.
 
Truecrypt advices 20+ for password.
And btw if you are paranoid you can put those zipped files into hidden truecrypt file with some decoy data :D
 
Michaelius said:
Truecrypt advices 20+ for password.
And btw if you are paranoid you can put those zipped files into hidden truecrypt file with some decoy data :D
Click to expand...

And then the bad guy just installs a trojan and grabs the files when he accesses them. Done. :rolleyes:
 
Well, the key might not come from the keyboard. So a simple keylogger might not cut it.
 
Yes, it is. It was just to point out that you can use the strogest encryption possible (#11), but still lose to the bad guy that wants your data.
 
You must log in or register to reply here.
Back
Top