Private data protection.

[Ilja O.]

On Sat, May 31, 2008 at 6:32 PM, Andy Green <andy at openmoko.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1

> I read an provocative estimate a year or so ago that each extra
> character of a password adds only on average 1.5 bits of entropy to it.
> ~ Considering how most passwords are formed from dictionary words, albeit
> slightly modified or appended, it sounds about right.
>

Who says that this password will be created by human? Program should
generate it automatically, shows it to user, user writes (or prints)
it and saves in piggy bank hoping he will not need it at all.
This function will be used so rare that there is not point in creating
rememberable passwords.