Expectation Entropy as a Password Strength Metric

arXiv:2404.16853v1 Announce Type: new
Abstract: The classical combinatorics-based password strength formula provides a result in tens of bits, whereas the NIST Entropy Estimation Suite give a result between 0 and 1 for Min-entropy. In this work, we present a newly developed metric -- Expectation entropy that can be applied to estimate the strength of any random or random-like password. Expectation entropy provides the strength of a password on the same scale as an entropy estimation tool. Having an 'Expectation entropy' …

arxiv bits can cs.cr entropy metric nist password password strength result strength work