Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Rich Freeman
On Sat, Sep 23, 2023 at 11:05 AM Dale wrote: > > I'm not to clear on this but it looks like it is using 'aes-xts-plain64' > to me. If so, is that good enough? Is there better? You are using the defaults, which is what you should be using, as they're very secure. As far as I'm aware there is

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Håkon Alstadheim
Den 23.09.2023 15:42, skrev Dale: Wols Lists wrote: On 19/09/2023 10:13, Dale wrote: That's a interesting way to come up with passwords tho.  I've seen that is a few whodunit type shows.  Way back in the old days, they had some interesting ways of coding messages.  Passwords are sort of

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Dale
Wol wrote: > On 23/09/2023 14:35, Dale wrote: >> Another question.  Are people trying to work on better encryption >> given current encryption can be cracked?  I read some things changed >> after Snowden.  I'm just not sure what and if more changes are needed >> even today. > >> If you wanted the

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Wol
On 23/09/2023 14:35, Dale wrote: Another question.  Are people trying to work on better encryption given current encryption can be cracked?  I read some things changed after Snowden.  I'm just not sure what and if more changes are needed even today. If you wanted the most secure and hard to

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Dale
Wols Lists wrote: > On 19/09/2023 10:13, Dale wrote: >> That's a interesting way to come up with passwords tho.  I've seen that >> is a few whodunit type shows.  Way back in the old days, they had some >> interesting ways of coding messages.  Passwords are sort of similar. > > Back when we were

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Dale
Wols Lists wrote: > On 20/09/2023 19:05, Frank Steinmetzger wrote: >>> In principle, a repeated space character in your passphrase could help >>> reduce the computational burden of an offline brute force attack, by >>> e.g. >>> helping an attacker to identify the number of individual words in a

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Wols Lists
On 19/09/2023 10:13, Dale wrote: That's a interesting way to come up with passwords tho.  I've seen that is a few whodunit type shows.  Way back in the old days, they had some interesting ways of coding messages.  Passwords are sort of similar. Back when we were busy conquering India ... The

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Wols Lists
On 20/09/2023 19:05, Frank Steinmetzger wrote: In principle, a repeated space character in your passphrase could help reduce the computational burden of an offline brute force attack, by e.g. helping an attacker to identify the number of individual words in a passphrase. Due to the rotation,

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-23 Thread Wols Lists
On 19/09/2023 10:10, Jude DaShiell wrote: Once the set spots got figured five dice got used for letters add the total and subtract 4 for the particular letter. Which actually isn't random. It's a bell curve peaking probably between J and M. Think, if you throw 2 dice, there are 36 possible

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread Frank Steinmetzger
Am Wed, Sep 20, 2023 at 01:28:09PM +0100 schrieb Michael: > > I have a question tho. Can a person use a password/pass phrase that is > > like this: 'This is a stupid pass phrase.' Does it accept that even > > with spaces? I know file names can have spaces for a long while now but > > way

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread Jude DaShiell
Another possibility is to write down encrypted passwords and don't disclose encryption technique. The rot13 is worthless. -- Jude "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940. On Wed, 20 Sep 2023, Hoël

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread Jack
On 9/20/23 12:18, Hoël Bézier wrote: Am Tue, Sep 19, 2023 at 12:36:13AM -0500 schrieb Dale: In the real world tho, how do people reading this make passwords that no one could ever guess?  I use Bitwarden to handle website passwords and it does a good job.  I make up my own tho when encrypting

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread Hoël Bézier
Am Tue, Sep 19, 2023 at 12:36:13AM -0500 schrieb Dale: In the real world tho, how do people reading this make passwords that no one could ever guess?  I use Bitwarden to handle website passwords and it does a good job.  I make up my own tho when encrypting drives.  I'm not sure I can really use

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread Michael
On Wednesday, 20 September 2023 05:19:18 BST Dale wrote: > Michael wrote: > > On Tuesday, 19 September 2023 06:36:13 BST Dale wrote: > >> Heck, a link to some good info on that would be good. :-) > > > > https://gitlab.com/cryptsetup/cryptsetup/-/blob/main/FAQ.md > > > >

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-20 Thread hitachi303
Am 20.09.23 um 04:41 schrieb Dale: It is interesting what people can come up with.  Thing is, if one uses a true random generated password, they are hard to crack but also hard to remember.  I try to come up with something that will be hard to crack but easy for me to remember. If someone has

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
Michael wrote: > On Tuesday, 19 September 2023 06:36:13 BST Dale wrote: > >> Heck, a link to some good info on that would be good. :-) > https://gitlab.com/cryptsetup/cryptsetup/-/blob/main/FAQ.md > > https://gitlab.com/cryptsetup/cryptsetup/wikis/LUKS-standard/on-disk-format.pdf > >

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
Michael wrote: > On Tuesday, 19 September 2023 12:13:40 BST Dale wrote: >> H, >> >> For some reason, I didn't get Michael's email. I see him being quoted >> but don't have his original. I wonder what is up with that. O-o > Assuming you will receive this message, have a look here: > >

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
Jude DaShiell wrote: > I generate random passwords using dice. First and last characters in > passwords are letters that's arbitrary buys more time. Those should have > lengths over 13 and before the agency I used to work for went to > smartcards and 256 character random passwords their last

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread hitachi303
Am 19.09.23 um 13:47 schrieb Michael: A couple of minutes? https://xkcd.com/538/  Most crypto nerds have a wrench at home. The gov. can even save those 5$. :-)

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Michael
On Tuesday, 19 September 2023 12:13:40 BST Dale wrote: > H, > > For some reason, I didn't get Michael's email. I see him being quoted > but don't have his original. I wonder what is up with that. O-o Assuming you will receive this message, have a look here:

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
Jude DaShiell wrote: > another possibility is use of a dictionary. Find a word in dictionary > note page column and line. Divide pages in dictionary by 2 and either add > or subtract that number of pages to or from page word is found on then on > the new page find the column and line for your

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
H, For some reason, I didn't get Michael's email.  I see him being quoted but don't have his original.  I wonder what is up with that.  O-o Rich Freeman wrote: > On Tue, Sep 19, 2023 at 4:26 AM Michael wrote: >> On Tuesday, 19 September 2023 06:36:13 BST Dale wrote: >>> Howdy, >>> >> A

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Rich Freeman
On Tue, Sep 19, 2023 at 4:26 AM Michael wrote: > > On Tuesday, 19 September 2023 06:36:13 BST Dale wrote: > > Howdy, > > > A strong > password, like a strong door lock, buys you time. Hence the general > recommendation to change your passwords frequently. While that can help on websites, it is

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Jude DaShiell
another possibility is use of a dictionary. Find a word in dictionary note page column and line. Divide pages in dictionary by 2 and either add or subtract that number of pages to or from page word is found on then on the new page find the column and line for your actual password. Of course,

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Dale
hitachi303 wrote: > Am 19.09.23 um 07:36 schrieb Dale: >> Maybe even a example or two of a fake password, just something that >> you would come up with and how. > > > There was this TV series Sherlock. In one episode they communicated by > numbers where each number referred to a word in a book.

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Jude DaShiell
I generate random passwords using dice. First and last characters in passwords are letters that's arbitrary buys more time. Those should have lengths over 13 and before the agency I used to work for went to smartcards and 256 character random passwords their last standard was 16 characters with

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread hitachi303
Am 19.09.23 um 07:36 schrieb Dale: Maybe even a example or two of a fake password, just something that you would come up with and how. There was this TV series Sherlock. In one episode they communicated by numbers where each number referred to a word in a book. This was somewhat also used

Re: [gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-19 Thread Michael
On Tuesday, 19 September 2023 06:36:13 BST Dale wrote: > Howdy, > > As some know, I encrypt a lot of stuff here. I use passwords that I can > recall but no one could ever guess. I don't use things that someone may > figure out like pet's name or anything like that. I use a couple sites > to

[gentoo-user] Password questions, looking for opinions. cryptsetup question too.

2023-09-18 Thread Dale
Howdy, As some know, I encrypt a lot of stuff here.  I use passwords that I can recall but no one could ever guess.  I don't use things that someone may figure out like pet's name or anything like that.  I use a couple sites to see just how good my passwords are.  I try to get into the millions