12 word dice-ware like password - even if all lower case - is unbreakable now and in the near/medium/far future.
If the NSA was directly brute forcing this password it would take longer than the age of the universe currently.
I'm not sure what the LISK word space is, but diceware is 7776 words. 12 words = a password space so gigantic that an attacker, even knowing you used diceware and knowing you used 12 words would not be able to bruteforce it (even if the attacker is, say, the NSA).
Here is the size of the password space of a 12 word diceware word:
48,873,677,980,689,257,489,322,752,273,774,603,865,660,850,176
This number is not merely large, it's a monster. A supercomputer running 1 quadrillion guesses per second barely eats at this number.
*the NSA can't do 1 quadrillion. If they could, it would take ca.10 nano-tullion (not even sure what the terminology for this number is officially) seconds to go through the entire space.
*found it, Nonillion... for perspective, 1 trillion seconds is 31,000+ years.
I find this very suspicious since if I'd found a flaw in a coin I was invested in I'd take it directly to the devs rather than blab it all over the internet.
Yes. It is most likely an attempt at scaring people but it hasn't worked.
As I say, Im not fudding here and not try to scare people.
Just want to warn you all.
1,025,109.8 words in the English language x 12 words x 75,000,000 checks per second
you get an impossible amount of time try harder please
that's like having 1,025,109.8 possible characters , and a password with a length of 12, even at trillions of checks per second you wont be able to crack anything
only 2048 words in the pass-dictionary, but still 5.444517870735016e+39 combinations
Main problem is that passphrasses use only lowcase letter
without numbers included.
So its easier to bruteforce than Bitcoin key.
2048 words, if it was case sensitive it would be more than that , stop putin us on
yes, and if Max change code and make passphrasses case sensitive, that can
give extra security to Lisk.
That is an excellent point, but the initial "bug" is bogus
A 12 character passcode with only lower case letters has 95,428,956,661,682,176 combinations.
There are 26 letters , however there are 2048 words in the passphrase data base
Not to mention, one would have to have a perfect list of all those words specifically!
There are 1,025,109.8 words in the English language
Adding a variable of upper and lowercase alternating letters would definitely be great, but this Fud is just that, fud
Basically dont worry guys its all good
Max,... any comments...?