Rebase on better research #38
Description
- Bonneau, "The science of guessing: analysing an anonymized corpus of 70 million passwords", S&P 2012.
- Zhang et al., "The security of modern password expiration: An algorithmic framework and empirical analysis", CCS 2010.
- Weir et al., "Testing metrics for password creation policies by attacking large sets of revealed passwords", CCS 2010.
Particularly, revise the entropy parts.