Re: maximum passphrase for symmetric encryption ?

2011-12-28 Thread Aaron Toponce
On Wed, Dec 28, 2011 at 12:32:44AM +0100, Jerome Baum wrote: On 2011-12-28 00:27, Aaron Toponce wrote: On Tue, Dec 27, 2011 at 11:23:50PM +0100, Jerome Baum wrote: I can't tell for gpg specifically but it's not so much about characters. It's about entropy. Natural language is redundant, and

Re: maximum passphrase for symmetric encryption ?

2011-12-27 Thread Jerome Baum
On 2011-12-27 23:14, ved...@nym.hush.com wrote: Is there a maximum size for a passphrase for symmetric encryption in gnupg, or does a passphrase exceeding a certain size not add any further security to the process? Example, The session key for AES 256 is 64 hexadecimal characters. The

maximum passphrase for symmetric encryption ?

2011-12-27 Thread vedaal
Is there a maximum size for a passphrase for symmetric encryption in gnupg, or does a passphrase exceeding a certain size not add any further security to the process? Example, The session key for AES 256 is 64 hexadecimal characters. The approximate equivalent in brute force work is 20

Re: maximum passphrase for symmetric encryption ?

2011-12-27 Thread Aaron Toponce
There may be some errors in my reply, so if so, please notify me. On Tue, Dec 27, 2011 at 11:23:50PM +0100, Jerome Baum wrote: On 2011-12-27 23:14, ved...@nym.hush.com wrote: The approximate equivalent in brute force work is 20 diceware words. [ 7776^19 2^256 7776^20 ]. A string of

Re: maximum passphrase for symmetric encryption ?

2011-12-27 Thread Jerome Baum
On 2011-12-28 00:27, Aaron Toponce wrote: On Tue, Dec 27, 2011 at 11:23:50PM +0100, Jerome Baum wrote: I can't tell for gpg specifically but it's not so much about characters. It's about entropy. Natural language is redundant, and diceware uses words from natural language. Yes, but each

maximum passphrase for symmetric encryption ?

2011-12-27 Thread vedaal
Jerome Baum jerome at jeromebaum.com wrote on Tue Dec 27 23:23:50 CET 2011 : gpg might cut off after the 64th character and drop entropy from your passphrase. But that sounds unlikely. That's exactly my question. Does gnupg have a maximum string length for a passphrase, and restrict itself to

Re: maximum passphrase for symmetric encryption ?

2011-12-27 Thread brian m. carlson
On Tue, Dec 27, 2011 at 07:54:05PM -0500, ved...@nym.hush.com wrote: That's exactly my question. Does gnupg have a maximum string length for a passphrase, and restrict itself to the entropy contained within that length? Not to my knowledge. OpenPGP does not specify a maximum string length