[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: why compression doesn't perfectly even out entropy



Perhaps keyspace analysis and randomness analysis should be done from a 
Bayesian technique, with the the potential perspective of the cracker, or 
your estimate of the potental prospective of the cracker as a priori 
conditions.

Hamlet could well qualify as a random string, however if your cracker was 
using 'Great Books of Western Civ' as a dictionary source, it would not 
be so good.

-----------------------------------------------------------------------
Jay Holovacs <[email protected]>
-----------------------------------------------------------------------
PGP Key fingerprint =  AC 29 C8 7A E4 2D 07 27  AE CA 99 4A F6 59 87 90 

On Wed, 17 Apr 1996, Simon Spero wrote:

> On Wed, 17 Apr 1996, Mark Rogaski wrote:
> 
> > Is it possible to find a percentage of the key space to eliminate that
> > will optimize security assuming that the attacker will try the easy
> > stuff first (and is it possible to quantify "easy stuff")?
> 
> Hmmm- I think this could be interesting to study; if we treat the space 
> of possible passwords as a non-uniform probability distribution 
> (Zipfian?), and then transform it in such a way to be uniform (by 
> having the probability of certain passwords being disqualified be 
> based on their relative probability it should be possible to get a 
> situation where all passwords are possible, and all have equal probability.