Are the figures you give regarding the quality of Diceware passwords are affected by the English language redundancy?
The figures I give regarding the quality of Diceware passwords are not affected by English language redundancy.This issue confuses many people, so a longer explanation is called for. To understand what is going on here, it would help to think first about a different way to construct a passphrase that is also valid: selecting letters at random from the ordinary English alphabet: abcdefghijklmnopqurtuvwxyz There are, of course, 26 letters in this alphabet. There are many ways to select random letters. I describe a few in the Diceware FAQ. Let’s not worry about how for now, but assume we have selected a passphrase consisting entirely of random letters, say ten of them. How strong is this passphrase? Well, first we should count how many possible 10-letter passphrases there can be. There are 26 possibilities for the first letter, another 26 for the second letter and so on ten times. So the number of possibilities is: 26 X 26 X 26 X 26 X 26 X 26 X 26 X 26 X 26 X 26 = 141167095653376 Mathemat
