#hardwareacceleration — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #hardwareacceleration, aggregated by home.social.
-
Stop Guessing, Start Measuring: The Cold Math of the Passphrase Transition
1,644 words, 9 minutes read time.
The Structural Collapse of the Legacy Password
The traditional eight-character alphanumeric password is a broken line of defense that offers nothing more than a false sense of security. For decades, users have been instructed to construct complex strings filled with uppercase letters, numbers, and obscure symbols, under the mistaken belief that this fragmentation creates an impenetrable barrier. The contemporary threat landscape has rendered these legacy methodologies entirely obsolete, as attackers no longer rely on manual guessing but on automated, high-velocity cryptographic assaults that exploit the inherent predictability of human patterns. To survive in this environment, enterprise architecture must shift toward the passphrase, a credential strategy rooted in length rather than fragmented complexity. This analytical deep dive will demonstrate that information entropy heavily favors length over a constrained character pool, proving that longer strings fundamentally break the mathematical models used by modern cracking tools. Furthermore, an examination of hardware acceleration will reveal how easily graphics processing units dismantle complex but short passwords through sheer processing volume. The analysis will also expose the human failure point, showing how predictable character substitutions actually aid automated dictionary attacks rather than hindering them. Finally, this post will outline the institutional shift led by regulatory frameworks that officially mandates the transition to high-entropy passphrases as a baseline security requirement.
Why Entropy Defeats Arbitrary Complexity
The security of any credential rests entirely on its mathematical entropy, which measures the total number of possible combinations an attacker must search through to guarantee a successful breach. Legacy security policies focused intensely on expanding the character pool by forcing users to mix uppercase letters, lowercase letters, numbers, and symbols, assuming this diversity would stall an attack. This logic fails because the total search space scales linearly when adding character types, but scales exponentially when increasing the overall length of the string. An eight-character password drawing from an expanded pool of ninety-four possible characters yields a search space that modern computing clusters can exhaust in a matter of hours. Conversely, a twenty-character passphrase composed exclusively of standard lowercase letters draws from a smaller pool of twenty-six characters, yet its sheer length creates a computational search space that is astronomically larger. The exponential power of length completely dwarfs the linear additions of complexity, making the long string mathematically superior in every measurable metric. Security is a game of resource depletion, and forcing an attacker to calculate permutations across a massive length consumes their time and computational power far more effectively than a short, complex puzzle. Relying on symbols to protect a short credential is a fundamental misunderstanding of cryptographic reality.
How Modern Computing Power Obliterates Standard Credentials
The rise of massive hardware acceleration has turned password cracking into an industrialized, automated process that operates at a scale most organizations fail to comprehend. Modern threat actors do not target live login portals where rate-limiting defenses exist; they exfiltrate hashed credential databases and conduct offline attacks using specialized graphics processing unit clusters. A single consumer-grade graphics card can execute billions of cryptographic hash calculations every second, and when multiple cards are parallelized, the throughput becomes devastatingly efficient. Legacy hashing algorithms that were once considered robust offer minimal resistance against this level of raw processing power when the target credential is short. A complex, eight-character password is reduced to a minor computational speed bump when confronted by an array capable of cycling through trillions of permutations in a single afternoon. Passphrases alter this dynamic entirely by forcing the attack automation to scale up its calculations to a point that becomes financially and logistically unviable for the adversary. When a credential possesses sufficient length, the time required to exhaust the mathematical possibilities extends from hours into decades, effectively neutralizing the advantage of hardware acceleration. Organizations that continue to permit short, complex credentials are explicitly ignoring the reality of modern computing capability and leaving their infrastructure vulnerable to rapid automated compromise.
The Illusion of Security in Character Substitution
Human psychology is inherently predictable, and when users are forced to create complex strings that defy natural memory retention, they invariably take shortcuts that automated attack tools are specifically designed to exploit. The common practice of replacing a letter with a lookalike number or symbol does not create randomness; it merely creates a predictable pattern that mirrors basic human behavior. Automated dictionary attacks do not guess randomly across the entire character space from the first second; they utilize highly sophisticated rule sets that automatically apply common substitutions to known words. This means an obfuscated password is often broken just as quickly as its plain-text counterpart because the underlying structure remains entirely unoriginal. Furthermore, forcing users to memorize these fragmented, unnatural strings leads directly to credential reuse across multiple platforms, creating a systemic risk where a single third-party breach compromises the entire enterprise. Passphrases solve this fundamental human vulnerability by leveraging words arranged in a sequence that is easy for a human to remember but entirely disjointed to an algorithm. By aligning credential policy with the way the human brain naturally retains information, organizations eliminate the need for dangerous substitutions and drastic reuse, creating a security model that functions in reality rather than only on paper.
Aligning Enterprise Standards with High-Entropy Passphrases
The transition from short, complex passwords to long passphrases is no longer a matter of structural debate; it is a formalized directive established by major global cybersecurity frameworks. The National Institute of Standards and Technology explicitly overhauled its digital identity guidelines to eliminate the legacy requirements for arbitrary character complexity and forced periodic expiration. Modern compliance frameworks recognize that frequent password changes and complex character mandates directly degrade security by encouraging predictable patterns and user fatigue. The updated standards heavily prioritize credential length, explicitly advising organizations to configure their identity providers to accept long strings while screening out known compromised entries. Implementing this architecture requires a deliberate reconfiguration of active directory environments, single sign-on platforms, and enterprise identity management systems to support minimum lengths of at least fifteen to twenty characters. Legacy applications that artificially restrict input length must be systematically updated or replaced, as they represent a critical vulnerability that prevents the enforcement of modern entropy standards. Failing to align enterprise architecture with these updated frameworks is a failure of technical oversight that leaves an organization legally and operationally exposed when a breach occurs.
The Definite Verdict on Credential Architecture
The data dictates a clear and uncompromising conclusion regarding enterprise credential policy. The legacy framework of short, complex passwords has utterly failed to withstand the realities of modern computing power, automated attack methodologies, and predictable human psychology. Information entropy proves that string length is the primary factor in resisting cryptographic attacks, while hardware acceleration has turned the cracking of short credentials into a trivial task. Human-generated substitutions offer zero protection against sophisticated dictionary rule sets, serving only to complicate user experience while leaving the underlying data vulnerable to exploitation. True security requires a complete rejection of outdated complexity mandates in favor of long, high-entropy passphrases that leverage exponential mathematical growth to exhaust attacker resources. Enterprise infrastructure must adapt immediately to these established standards to mitigate the threat of automated compromise and align with modern regulatory frameworks.
Enterprise identity architecture must be updated to enforce minimum lengths of fifteen to twenty characters to resist automated exploitation.
Information entropy mathematically favors credential length over character set complexity, creating exponentially larger search spaces.
Modern graphics processing unit clusters can rapidly exhaust short, complex credentials through high-velocity offline cracking.
Predictable human character substitutions fail to deceive modern automated dictionary attacks and encourage dangerous credential reuse.
Global security frameworks have officially shifted toward prioritizing length and eliminating arbitrary complexity mandates.
Audit Your Network: Secure Your Enterprise Infrastructure With High-Entropy Passphrases
Stop relying on an obsolete defense strategy that invites catastrophe. Audit your identity providers immediately, systematically dismantle the arbitrary complexity rules that compromise your user base, and configure your active directory to enforce a strict minimum threshold of fifteen or more characters. The transition to high-entropy passphrases is not an operational preference; it is an immediate cryptographic necessity to shield your enterprise from automated exploitation.
SUPPORTSUBSCRIBECONTACT MED. Bryan King
Sources
- NIST Special Publication 800-63B: Digital Identity Guidelines – Authentication and Lifecycle Management
- CISA: Protecting Against Brute Force Attacks
- CISA: Cyber Threats and Advisory Library
- MITRE ATT&CK: Brute Force Techniques (T1110)
- MITRE ATT&CK: Password Cracking (T1110.002)
- MITRE ATT&CK: Password Spraying (T1110.003)
- MITRE ATT&CK: Password Guessing (T1110.001)
- MITRE ATT&CK: Credential Stuffing (T1110.004)
- MITRE ATT&CK: Credentials from Password Stores (T1555)
- IEEE Xplore: Computational Metrics of Password Entropy
- IEEE Xplore: Analysis of Password Cracking Dynamics Using GPUs
- IEEE Xplore: Human Behavior Patterns in Alphanumeric Character Substitutions
- IEEE Xplore: Performance Optimization of Offline Dictionary Attacks
- OWASP: Password Creation Requirements Control Guidelines
- OWASP Top 10: Identification and Authentication Failures
- OWASP: Comprehensive Guide to Brute Force Attacks
- OWASP: Mechanics of Automated Credential Stuffing
- SANS Institute: The Mathematics of Length vs. Complexity
- SANS Institute: Defending Against Modern GPU Password Cracking Clusters
- SANS Institute: Rethinking Enterprise Password Expiration Policies
- SANS Institute: Implementation Strategies for High-Entropy Passphrases
- ENISA: Guidelines for Secure Password and Authentication Schemes
- Australian Cyber Security Centre (ACSC): Password Governance and Policies
- UK National Cyber Security Centre (NCSC): Password Policy Re-thought
- UK NCSC: Using Three Random Words for Strong Passphrases
- NIST Computer Security Resource Center: SP 800-63B Structural Reference
- BSI Germany: IT-Grundschutz Standards for Authentication
- ACM Digital Library: Analysis of Leaked Password Datasets and Substitution Rules
- ACM Digital Library: Guessing Human Passwords via Probabilistic Context-Free Grammars
- ACM Digital Library: The Security of Length-Based Passphrase Configurations
- ISO/IEC 27002: Information Security, Cybersecurity, and Privacy Protection Controls
- PCI DSS: Document Library for Identity and Access
Disclaimer:
The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.
Related Posts
Rate this:
#accessControl #accessManagement #accessVulnerability #accountProtection #activeDirectoryConfiguration #authenticationPolicy #automatedCyberAttacks #bruteForceDefense #characterSubstitution #CISAPasswordGuidelines #computerSecurity #credentialReuse #credentialStuffing #cryptographicHash #cyberThreatMitigation #cybersecurityBestPractices #cybersecurityCompliance #dataBreachPrevention #digitalIdentityGuidelines #enterpriseIdentityArchitecture #enterpriseSecurity #GPUPasswordCracking #hardwareAcceleration #highEntropyPassphrase #identityManagement #identityProviders #informationEntropy #ITCompliance #mathematicalEntropy #multiGPUCracking #networkAudit #networkDefense #networkSecurity #NISTSP80063B #offlineDictionaryAttack #passphraseVsPassword #passwordCracking #passwordEntropyFormula #PasswordSecurity #riskMitigation #securityAuditing #securityFrameworks #securityInfrastructure #singleSignOn #stringLength #systemVulnerability -
One Open-source Project Daily
Free open-source non-linear video editor
https://github.com/olive-editor/olive
#1ospd #opensource #cpp #crossplatform #glsl #hardwareacceleration #linux #macos #opengl #qt #videoeditor #vst #windows -
Take a deep dive into Chromium enablement on MediaTek Genio SoCs, with real performance numbers from #MediaTek hardware codecs using #Chromium’s V4L2 pipeline.
Get the breakdown here: https://www.collabora.com/news-and-blog/news-and-events/chromium-hardware-codecs-on-mediatek-genio-700-and-720-from-test-plans-to-real%E2%80%91world-performance.html
-
Parallelizing SHA256 Calculation on FPGA
https://www.controlpaths.com/2025/06/29/parallelizing_sha256-calculation-fpga/
#HackerNews #Parallelizing #SHA256 #FPGA #Technology #Cryptography #HardwareAcceleration
-
Update: It's probably not a #VAAPI / #VDPAU issue. Went through the #HardwareAcceleration #Arch wiki entry and confirmed both to be working.
-
on the #shownotes #grind for @gamesatwork_biz in preparation for Monday’s posting of e475 while tuning into the #Olympics. Stories about #robots, #telepresence, #HardwareAcceleration, #AI, #Friend and more! Check out earlier episodes, chock full of #AI #metaverse #AR #VR #gamification and so much more on https://www.gamesatwork.biz
-
New Embedded Vision Summit presentation from the President of the Khronos Group, Neil Trevett: “Open Standards Unleash Hardware Acceleration for Embedded Vision”
https://www.edge-ai-vision.com/2023/09/open-standards-unleash-hardware-acceleration-for-embedded-vision-a-presentation-from-the-khronos-group/
#openstandards #hardwareacceleration -
Any other #manjaro users out there using https://nonfree.eu/ for #mesanonfree #hardwareacceleration?
-
Chromium Fan? Canonical and Intel Team Up for Hardware Accelerated Build
If you run Ubuntu on a laptop or PC with 7th-generation Intel chips or later and you’re a fan of the Chromium browser, Canonical has something for you. It has partnered with Intel to create a Chromium snap that boasts hardware accelerated video decoding and encoding. Thus, the bespoke build offers better performance and extends battery life for Kaby Lake (7th Gen) and newer platforms when using VP8, VP9, and H.264 codecs. And those codecs are pretty ubiquitous in online content. So what’s the “catch? Well, for the moment this souped-up snap is a “beta” and not 100% ready for :sys_more_orange:
#News #Chromium #HardwareAcceleration #Intel #SnapApps #Snaps:sys_omgubuntu: https://www.omgubuntu.co.uk/2023/05/chromium-snap-hardware-acceleration-beta
-
CW: research review
D. Soni et al., "RPU: The Ring Processing Unit"¹
Ring-Learning-with-Errors (RLWE) has emerged as the foundation of many important techniques for improving security and privacy, including homomorphic encryption and post-quantum cryptography. While promising, these techniques have received limited use due to their extreme overheads of running on general-purpose machines. In this paper, we present a novel vector Instruction Set Architecture (ISA) and microarchitecture for accelerating the ring-based computations of RLWE. The ISA, named B512, is developed to meet the needs of ring processing workloads while balancing high-performance and general-purpose programming support. Having an ISA rather than fixed hardware facilitates continued software improvement post-fabrication and the ability to support the evolving workloads. We then propose the ring processing unit (RPU), a high-performance, modular implementation of B512. The RPU has native large word modular arithmetic support, capabilities for very wide parallel processing, and a large capacity high-bandwidth scratchpad to meet the needs of ring processing. We address the challenges of programming the RPU using a newly developed SPIRAL backend. A configurable simulator is built to characterize design tradeoffs and quantify performance. The best performing design was implemented in RTL and used to validate simulator performance. In addition to our characterization, we show that a RPU using 20.5mm2 of GF 12nm can provide a speedup of 1485x over a CPU running a 64k, 128-bit NTT, a core RLWE workload
#arXiv #ResearchPapers #RLWE #microarchitectures #ISA #HardwareAcceleration
__
¹ https://arxiv.org/abs/2303.17118 -
@mergy we hit your segment squared away. Fiber cut, and backup core pathway was 2Gbps link, but we never tuned configs for over 1Gbps. Should of had mandatory stress tests. #Dobb-Frank
#HardwareAcceleration -
RX.py (https://gitlab.com/pvmm/rx.py) is a Python script that prepares images for rendering using the MSX2 blitter. It can be quite efficient compressing images rich in flat polygons, replacing the original image by a bunch of line segments (which are both easy to store and draw) and recreate the original image using the MSX2 hardware blitter (which is relatively fast). #msx2 #gamedev #retrogamedev #hardwareAcceleration #v9938
-
Say goodbye to slow video encoding and noisy fans with Intel QuickSync and AMD AMF's hardware-accelerated video encoding on Ubuntu 22.04! Enjoy faster and more energy-efficient video processing with these cutting-edge technologies. #HardwareAcceleration #VideoEncoding #Ubuntu22.04
-
Hardware accelerated OpenMSX would not run on Wayland because GLEW expects GLX instead of EGL. So I wrote a tiny temporary fix until GLEW is fixed upstream and the major distros catch up. #glew #wayland #openMSX #emu #gnu #hardwareAcceleration #openGL https://github.com/openMSX/openMSX/pull/1492
-
Working on a blog post on a small free indie game. Played it a few times, it was fun! I figured I should get some #screenshots.
Played it a few more times, I enjoyed it. I tool screenshots using #Greenshot while playing. When done, I discover they're all of the title screen somehow. Argh.
So, I played it a few more times. It was a bit tiring. I took screenshots with #ShareX. When done, its screenshots, too, were unusable.
I recorded it using #OBS, which has a mode that's better at recording hardware acceleration, and got my screenshots out using #Shotcut. The game rasped against the inside walls of my brain while playing it.
-
CW: research review
N. Samardzic et al., "CraterLake: a hardware accelerator for efficient unbounded computation on encrypted data"¹
Fully Homomorphic Encryption (FHE) enables offloading computation to untrusted servers with cryptographic privacy. Despite its attractive security, FHE is not yet widely adopted due to its prohibitive overheads, about 10,000X over unencrypted computation. Recent FHE accelerators have made strides to bridge this performance gap. Unfortunately, prior accelerators only work well for simple programs, but become inefficient for complex programs, which bring additional costs and challenges.
We present CraterLake, the first FHE accelerator that enables FHE programs of unbounded size (i.e., unbounded multiplicative depth). Such computations require very large ciphertexts (tens of MBs each) and different algorithms that prior work does not support well. To tackle this challenge, CraterLake introduces a new hardware architecture that efficiently scales to very large cipher-texts, novel functional units to accelerate key kernels, and new algorithms and compiler techniques to reduce data movement.
We evaluate CraterLake on deep FHE programs, including deep neural networks like ResNet and LSTMs, where prior work takes minutes to hours per inference on a CPU. CraterLake outperforms a CPU by gmean 4,600X and the best prior FHE accelerator by 11.2X under similar area and power budgets. These speeds enable realtime performance on unbounded FHE programs for the first time.#ResearchPapers #HomomorphicEncryption #HardwareAcceleration
__
¹ https://dl.acm.org/doi/10.1145/3470496.3527393 -
Huh... #Chrome on this system does not like #hardwareAcceleration apparently. Videos had some weird colour splitting that resulted in mostly green layers...
-
Crypto exchange Liquid says it is now valued at over $1 billion following new investment - Crypto has a new unicorn after exchange Liquid announced today it has raised capital from investors ... more: http://feedproxy.google.com/~r/Techcrunch/~3/qbU0VtHZCQc/ #hardwareacceleration #cryptocurrencies #cryptocurrency #southeastasia #philippines #idgcapital #singapore #coinbase #bitmain #unicorn #vietnam #mining #japan #malta #asia
-
Determined AI nabs $11M Series A to democratize AI development - Deep learning involves a highly iterative process where data scientists build models and test them o... more: http://feedproxy.google.com/~r/Techcrunch/~3/EMbkFxA1GGU/ #artificialintelligence #hardwareacceleration #machinelearning #determinedai #enterprise #startups #funding #tc #gv