12-02-2017, 06:03 PM
(This post was last modified: 12-02-2017, 06:36 PM by walterlacka.)
Now I've got myself thoroughly confused.. I ran the following (using the fix that philsmd pointed me to):
Notice it was 9 for min/max length
Lower 1/9
Upper 0/1
Digit 0/4
Special 0/2
Created 28246 policy masks
Then I ran the following:
Everything same as first run EXCEPT in this case I'm using Min/Max 2 for UPPER (I've also changed the max for lower to be 7 since min upper is 2). This created 41364 policy masks.
As a quick "logic-check", I ran the following next:
This one is basically the "combination" of the two examples above - it has same MIN/MAX for digit and special. But for upper it has 0/2 min/max. All three example using 9 for mask length.
Notice that number of policy masks from example 1 and 2 add up to the number of policy masks in example 3. So at quick glance I thought my logic was solid.... but then I started thinking about it more and..
I can't figure out why the second example created more policy masks than the first example. In the first example, it was trying 0 or 1 UPPER. In the second example, it was trying EXACTLY 2 UPPER (which in my mind means less policy masks).
EDIT:after thinking about this more, I'm guessing the reason for this is that with 2 UPPER's, they have 9 different places they could go in the mask - is this right?
Code:
[*]Using 12,000,000,000 keys/sec for calculations.
[*]Password policy:
Pass Lengths: min:9 max:9
Min strength: l:1 u:0 d:0 s:0
Max strength: l:9 u:1 d:4 s:2
[*]Generating [compliant] masks.
[*]Generating 9 character password masks.
[*]Total Masks: 262144 Time: >1 year
[*]Policy Masks: 28246 Time: 23 days, 19:34:47Notice it was 9 for min/max length
Lower 1/9
Upper 0/1
Digit 0/4
Special 0/2
Created 28246 policy masks
Then I ran the following:
Code:
[*]Using 12,000,000,000 keys/sec for calculations.
[*]Password policy:
Pass Lengths: min:9 max:9
Min strength: l:1 u:2 d:0 s:0
Max strength: l:7 u:2 d:4 s:2
[*]Generating [compliant] masks.
[*]Generating 9 character password masks.
[*]Total Masks: 262144 Time: >1 year
[*]Policy Masks: 41364 Time: 45 days, 22:01:53Everything same as first run EXCEPT in this case I'm using Min/Max 2 for UPPER (I've also changed the max for lower to be 7 since min upper is 2). This created 41364 policy masks.
As a quick "logic-check", I ran the following next:
Code:
[*]Using 12,000,000,000 keys/sec for calculations.
[*]Password policy:
Pass Lengths: min:9 max:9
Min strength: l:1 u:0 d:0 s:0
Max strength: l:9 u:2 d:4 s:2
[*]Generating [compliant] masks.
[*]Generating 9 character password masks.
[*]Total Masks: 262144 Time: >1 year
[*]Policy Masks: 69610 Time: 69 days, 17:36:40This one is basically the "combination" of the two examples above - it has same MIN/MAX for digit and special. But for upper it has 0/2 min/max. All three example using 9 for mask length.
Notice that number of policy masks from example 1 and 2 add up to the number of policy masks in example 3. So at quick glance I thought my logic was solid.... but then I started thinking about it more and..
I can't figure out why the second example created more policy masks than the first example. In the first example, it was trying 0 or 1 UPPER. In the second example, it was trying EXACTLY 2 UPPER (which in my mind means less policy masks).
EDIT:after thinking about this more, I'm guessing the reason for this is that with 2 UPPER's, they have 9 different places they could go in the mask - is this right?