Replying to Avatar Hanshan

for starters

it would take something like,

100000000000000000000 years

to brute force a good 20 character password.

theres nothing inherently insecure about laptops.

otherwise you're not really wrong.

but you are strawmanning and context switching.

your "duh I forgot my PIN" is MUCH more obvious than a Veracrypt volume.

because you can decrypt the Veracrypt volume and show them.

it comes back to plausible deniability.

if your threat model is

"the govt knows about my coins and they will use the entire resources of the NSA to get them"

and they come to your residence to arrest you

then you have a good argument that a current model Pixel in a box somewhere acting as (warm) storage is a better solution.

but you're also going to jail when you don't give them the PIN.

so theres that.

if the threat model is "they *suspect* i have coins and I need to show reasonable proof I dont"

like you're crossing a border somewhere, get tagged for the secondary and they start pressing you,

or you bought KYCed coins and the IRS comes for their share,

then having a phone and claiming you cant access it isn't going to work if they intend to do a full search of your devices.

it will likely make it worse.

but if you show them the hidden partition with the embarrassing videos of you and the wife, you've established plausible deniability.

and your "harvest now decrypt later" isn't impressive.

there are new attacks developed against hardware all the time.

so you think they're going to develop quantum computing, still have access to the device and care enough?

to break a Veracrypt volume they arent even sure exists?

but the TitanM2 key derivation process is still going to be unassailable?

its is a BIG stretch.

oh

I'm wrong about the length of time to crack a 20 character password.

depends how many GPUs they're willing to use

ie, how many millions theyre willing to spend

but its doable within not too many years.

Reply to this note

Please Login to reply.

Discussion

ok looking at current GPU technology 😂

a 128 bit password has

3.4×10^38 possible keys

(a 20 character password with upper, lower, numbers and 10 specials is technically 123 bits, but because Veracrypt and Luks and others use PBKDF2, it's functionally at least 128 bits)

we'll say a NVIDIA H100 GPU can guess 10^12 keys per second

I make that

1.07x10^19 years to go through all combinations.

and unless I'm mistaken

10^6 modern, state of the art GPUs would only reduce the time to

1.07x10^13 years.

so i was right the first time.

cracking strong passwords isnt a thing.