Diceware is a method for creating passphrases, passwords, and other cryptographic variables using ordinary dice as a hardware random number generator. For each word in the passphrase, five die rolls are required. The numbers that come up in the rolls are assembled as a five digit number, e.g. 43146. That number is then used to look up a word in a word list. In the English list 43146 corresponds to munch.

PropertyValue
dbpedia-owl:thumbnail
dbpprop:abstract
  • Diceware is a method for creating passphrases, passwords, and other cryptographic variables using ordinary dice as a hardware random number generator. For each word in the passphrase, five die rolls are required. The numbers that come up in the rolls are assembled as a five digit number, e.g. 43146. That number is then used to look up a word in a word list. In the English list 43146 corresponds to munch. Lists have been compiled for several languages, including English, Finnish, German, Italian, Polish, Russian, Spanish and Swedish. A Diceware word list is any list of <math>6^5 = 7,776</math> unique words, preferably ones the user will find easy to spell and to remember. The level of unpredictability of a Diceware passphrase can be easily calculated: each word adds 12.9 bits of entropy to the passphrase (that is, <math>\log_2</math> bits). Five words (slightly over 64 bits) are considered a minimum length. This level of unpredictability assumes that a potential attacker knows both that Diceware has been used to generate the passphrase, the particular word list used, and exactly how many words make up the passphrase. If the attacker has less information, the entropy can be greater than 12.9 bits per word. Diceware passphrases can be difficult to remember and some may prefer other methods, such as using the initial letters of a memorable phrase (for instance, "To be or not to be, that is the question" becomes "Tbontb,titq"). Estimating the entropy of the phrase using the latter approach is more difficult. In this example, the phrase used is very well-known (being from Shakespeare) and so is easily guessed, as for instance by using a phrase dictionary. Thus, the entropy of this example is low. Higher entropy can be had from user chosen phrases handled this way, if the user is careful to avoid guessable phrases. If the length of Diceware passphrases are assumed to be known to an attacker, then the passphrases yield less entropy than the ideal 64.62 bits when used with dictionaries containing variable-length words. This is because the length of the resulting passphrases "leak" information about their composition.
  • Diceware ist eine einfache Methode, sichere und leicht erinnerbare Passwörter und Passphrasen mit Hilfe eines Würfels zu erzeugen. Für die Erzeugung einer Passphrase werden mehrere Wörter aus einer speziellen Wortliste ausgewählt und aneinander gehängt. Die Wörter werden mittels eines Würfels, der hier als Zufallszahlengenerator dient, ermittelt. Für jedes Wort werden fünf Würfelwürfe gebraucht, deren Augen als Ziffern einer fünfstelligen senären Zahl dienen, beispielsweise 43142. Anhand dieser Zahl wird das zugehörige Wort aus der Wortliste ausgewählt. In der deutschen Wortliste entspricht 43142 dem Wort merken. Derzeit existieren Wortlisten für die Sprachen Chinesisch, Deutsch, Englisch, Finnisch, Französisch, Italienisch, Polnisch, Schwedisch und Spanisch. Trotz der großen Länge der Passphrasen kann man sich gut an sie erinnern, da die einzelnen Wörter als Einheiten gemerkt werden können. Um eine ausreichende Sicherheit zu erhalten, sollten mindestens fünf Wörter zu einer Passphrase zusammengeführt werden.
  • Diceware è un metodo basato sul lancio manuale di dadi il cui scopo è quello di creare password, passphrase ed altre variabili crittografiche. La parola inglese dice si traduce in Italiano con la parola dado. Uno degli obiettivi di Diceware è quello di creare una password che sia un buon compromesso fra sicurezza offerta e semplicità di memorizzazione. Un buon esempio di password sicura può essere "kt6. as67!!mffponcv49.,2of6dm7pe0" ma certamente non è facile da ricordare; analogamente una passphrase come "Nel mezzo del cammin di nostra vita mi ritrovai per una selva oscura ché la diritta via era smarrita" è facile da ricordare ma non è molto sicura.
dbpprop:hasPhotoCollection
dbpprop:reference
rdf:type
rdfs:comment
  • Diceware is a method for creating passphrases, passwords, and other cryptographic variables using ordinary dice as a hardware random number generator. For each word in the passphrase, five die rolls are required. The numbers that come up in the rolls are assembled as a five digit number, e.g. 43146. That number is then used to look up a word in a word list. In the English list 43146 corresponds to munch.
  • Diceware ist eine einfache Methode, sichere und leicht erinnerbare Passwörter und Passphrasen mit Hilfe eines Würfels zu erzeugen. Für die Erzeugung einer Passphrase werden mehrere Wörter aus einer speziellen Wortliste ausgewählt und aneinander gehängt. Die Wörter werden mittels eines Würfels, der hier als Zufallszahlengenerator dient, ermittelt. Für jedes Wort werden fünf Würfelwürfe gebraucht, deren Augen als Ziffern einer fünfstelligen senären Zahl dienen, beispielsweise 43142.
  • Diceware è un metodo basato sul lancio manuale di dadi il cui scopo è quello di creare password, passphrase ed altre variabili crittografiche. La parola inglese dice si traduce in Italiano con la parola dado. Uno degli obiettivi di Diceware è quello di creare una password che sia un buon compromesso fra sicurezza offerta e semplicità di memorizzazione. Un buon esempio di password sicura può essere "kt6.
rdfs:label
  • Diceware
  • Diceware
  • Diceware
owl:sameAs
skos:subject
foaf:depiction
foaf:page
is dbpprop:redirect of
is owl:sameAs of