Re: Winzip's 256bit-AES encryption & self-extracting files "VanguardLH" <VanguardLH@mail.invalid> wrote in
news:BqidneS_YYnfqeXanZ2dnUVZ_gadnZ2d@comcast.com:
> A lot has to do with how strong you make the password used for the
> seed in the encryption...
Truer words were never spoken! The password is almost always weaker than
the algorithm.
For example, to match the strength of a 256-bit encryption algorithm,
assuming truely random sequences of characters, you would require a
password at least 55 characters long if only lower-case was used, 45
characters long if upper-case and lower-case was used, 43 characters long
if upper-case, lower-case and numbers was used, and 39 characters long if
all 95 printable ASCII characters were used.
If the password consists of sequences of English words (Shannon entropy of
1.3 bits/character or so) then a passphrase 197 characters long would be
needed (to match the strength of a 256-bit encryption algorithm)
Very few real-world passwords/passphrases are anywhere close to this.
Regards, |