Re: Theoretical and maybe stupid questions about security

2013-11-20 Thread Robert J. Hansen
I wonder how easily my private key(s) ('secgring.gpg') can be cracked once somebody get access to it. No one with two brain cells to rub together will try brute-forcing a strong passphrase. No one. Assuming your passphrase is strong you could publish your secret key in the _New York Times_

Re: Theoretical and maybe stupid questions about security

2013-11-20 Thread David Shaw
On Nov 20, 2013, at 1:21 PM, Josef G. Bauer wrote: > Hi, > > I wonder how easily my private key(s) ('secgring.gpg') can be cracked > once somebody get access to it. Not at all easily, *if* you have a good passphrase on your private key(s). > Q: Is the password stored as an hash and can it be c

Theoretical and maybe stupid questions about security

2013-11-20 Thread Josef G. Bauer
Hi, I wonder how easily my private key(s) ('secgring.gpg') can be cracked once somebody get access to it. Q: Is the number of 2.8 billions password tries per day from the FAQs up-to-date? Q: Is the password stored as an hash and can it be cracked using Rainbow Tables? Is it maybe salted? Greet