Re: [cryptography] PINS and [Short] Passwords

2012-04-06 Thread Adam Back
The bit tying in to my comment a few days ago is they note that apple wont confirm but no doubt does provide a signed private app that takes the encrypted key material off the device for brute forcing. And an app for dumping all data off the device if thats also not possible without jail breaking

Re: [cryptography] PINS and [Short] Passwords

2012-04-05 Thread Jeffrey Walton
On Wed, Apr 4, 2012 at 3:45 PM, Jeffrey Walton wrote: > Hi All, > > Older iOS devices used a 4 digit PIN code, which was next to no > protection. Newer iOS allow passcodes which consist of a full > (fuller?) alphabet. > > Assuming a weak password policy (for example, 4 or 6 characters) are > there

Re: [cryptography] PINS and [Short] Passwords

2012-04-05 Thread Ben Laurie
On Wed, Apr 4, 2012 at 8:45 PM, Jeffrey Walton wrote: > Hi All, > > Older iOS devices used a 4 digit PIN code, which was next to no > protection. Newer iOS allow passcodes which consist of a full > (fuller?) alphabet. > > Assuming a weak password policy (for example, 4 or 6 characters) are > there

Re: [cryptography] PINS and [Short] Passwords

2012-04-04 Thread Seth David Schoen
Jeffrey Walton writes: > What is the state of the art for mobile password cracking on iOS and Android? I'm not sure if you're thinking primarily of the operating-system level passwords or third-party crypto apps. Dmitry Sklyarov (the same Dmitry Sklyarov) gave an interesting talk at BlackHat Eur

Re: [cryptography] PINS and [Short] Passwords

2012-04-04 Thread Jeffrey Walton
On Wed, Apr 4, 2012 at 5:06 PM, Adam Back wrote: > Surely one cant think of the limitations (requirement for cooperation from > the OS to test the PIN) as if they are cryptographic limitations... Yes, I'm thinking its probably close to a degenerate case of cracking a password from the desktop. Per

Re: [cryptography] PINS and [Short] Passwords

2012-04-04 Thread Adam Back
Surely one cant think of the limitations (requirement for cooperation from the OS to test the PIN) as if they are cryptographic limitations... Apple probably supplies such a service themself to law enforcement as a private apple approved ready-to-go app. Adam On Wed, Apr 04, 2012 at 03:45:09PM

[cryptography] PINS and [Short] Passwords

2012-04-04 Thread Jeffrey Walton
Hi All, Older iOS devices used a 4 digit PIN code, which was next to no protection. Newer iOS allow passcodes which consist of a full (fuller?) alphabet. Assuming a weak password policy (for example, 4 or 6 characters) are there any real benefits over PINs? What is the state of the art for mobil