On Tue, 25 Jun 2019 23:16:04 +0200, mpan wrote: >> Randomly open a dictionary and then randomly pointing on a word, >> repeating this a few times, is one way for an artist to get an >> inspiration. >> >> I wonder how safe it is to use such a method to generate a >> passphrase. > An old Chinese proverb says: do not invent your own crypto. I wouldn't do it exactly as described by my ironical inspiration example, I just wanted to point out that here are always pitfalls. Security experts are sometimes the reason for security flaws. "Heartbleed" for example was introduced as part of the groundwork for a dissertation. Sometimes questions and their answers are purely academic. Keep in mind that if you dice, random could generate a result absolutely equal to an biased pattern of even an obsessional neurotic and the obsessional neurotic wouldn't notice it. The likehood of randomly generating 1234 alike passphrases could only be ruled out by biasing the random generation with a pattern to avoid patterns. Nobody can rule out this dilemma.
