[for-q-clinton]

So you set the password policy far beyond that which is used by almost all organizations, something rarely found in practice, to get something that Rainbow Crack can't crack. Sorry, I'm not interested in something that unrealistic.

Let's just follow one of the biggest users of Microsoft technology. I'll pick a branch of the Military and use their standard. That would be realistic, right?

[antiRepublicrat]

I'll pick a branch of the Military and use their standard. That would be realistic, right?

I'll pick one currently in Army use right now on thousands of Windows and some UNIX systems in an environment that ranges from FOUO to TS: 10 characters, no dictionary, minumums: two uppercase, two lowercase, two numbers, two symbols (picked from any found on a standard keyboard).

Rainbow Crack will break all of them with a 99.9% probability. The RC screen output here (notice the very strong passwords) has it cracking longer passwords than that. In fact, it cracked ten of them in under six minutes. No table big enough exists to crack those passwords on a modern *NIX.