Analyzing the effectiveness of a dictionary attack to crack passphrases

Conducted a review of current recommendations for password protection of user accounts, taking into account the social factor. Demonstrated the comparison of password cracking speed of passwords hashed using various modern algorithms utilizing the graphics processor power. Proposed the algorithm for compiling a combined dictionary of password phrases consisting of both known quotations and random combinations of valid English words, taking into account the English grammar. Measured the hashing speed of such dictionary on RTX 4090 video card using SHA256 algorithm. Purpose: increasing the reliability of user passwords against brute-force and dictionary attacks, taking into account new recommendations for password structure. Checking the possibility of brute-force and dictionary attacks on weak passwords. Methods: two methods of dictionary generation are proposed. The first method is using variations of dictionary words and adding numbers and combinations to them. The second method is using password phrases composed of a random dictionary words taking into account English grammar. Results: Conducted an analysis of the complexity of brute-force attacks on popular hashing algorithms using graphics accelerators. Proposed recommendations for generating a dictionary for dictionary attacks in accordance with new password recommendations, and methods for protecting passwords from such attacks. Discussion: one of the tasks for further research is to collect statistics on the number of services and providers that provide an opportunity to use Cyrillic characters, spaces, special characters in passwords, and also allow creating long passwords (more than 64 characters). The second practical task is to create a program to perform Argon2 and scrypt hashing with GPU acceleration.