Just take the string as bytes and hash it ffs

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 2 years ago (4 children)

Reasonable upper limits are OK. But FFS, the limit should be enough to have a passphrase with 4 or 5 words in it.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 6 points 2 years ago (3 children)

    Usually 256 bit hash is used. 256 bits is 32 bytes or 32 characters. Of course you are losing some entropy because character set is limited, but 32 characters is beyond reasonable anyway.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 2 years ago* (last edited 2 years ago) (1 child)

    The eff passphrase generator has about 2.5 bits of entropy per character (without word separators). Eff recommends 6 word passphrases, and with an avg word length of 7, that's (only) 79.45 bits of entropy that won't even fit in the 32 characters. If there wasn't a password length limit it would be possible to saturate the hash entropy with a 20+ word & 102+ char passphrase.

  • source
  • parent
  • hideshow 1 child comment