[Cryptography] Excessive Math?

[Ryan Carboni]

http://www.isg.rhul.ac.uk/tls/RC4passwords.pdf

A 2^24 attack is impressive.

Now... let's see... going through a list of 70,000,000 passwords
 log(70,000,000)/log(2)=26 bits.

but many passwords aren't unique, and many are more common than others

and could be cross referenced with other databases of usernames and
passwords, as well as maybe an automated search of a user's social media
preference to determine their pets and interests....


I think cryptography is suffering from an excessive focus on math.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20150316/c3849ae8/attachment.html>