Cryptographic Strength of Passwords

The first thing I noticed logging into this site was the requirement for passwords to act as the primary key for the blockchain.

Interesting concept, made me think a little about the strength of passwords I use. You can go to various websites to check password strength (obviously not with a real password but one similar).

For example logmeonce

Using various randomly generated passwords (length 16) = time to crack is 6 trillion to 6 sextillion years (for a bunch of passwords I tried).

Increase length to 20, you get a bunch of passwords with a minimum time to crack of 6 sextillions years (some up into the nonillion year range).

Quite a big difference for 4 extra characters...

Trouble is try to remember a password like that (I do know that it is possible.

()

How about strings of random words?

Two Words

6 days (cursecharm)

97 billion years (eigenvectorconfused)

12 years (flirtbleakly)

8000 years (luxuryfrontier)

Three words

65 trillion years (admiralroboticmessiah)

97 billion years (flimsybeangeometric)

Four words

30 quintillion years (existentsoongymnistbreath)

9 octillion years (parasiticacrobaticwreckagepolar)

... and so on

Of course you need to find an offline way to generate the words. Should be easy enough

for example

 $ for i in 1 2 3 4 5; do sed -n -e ${RANDOM}p /usr/share/dict/british-english; done
clannish
antibacterials
abashing
boater's
BASIC's

Interesting...