Sunny Saini
www.SunnySaini.com

Tests

As tested on "My Computer 2013 win8"  [CPU: Intel Dual Core 1.6GHz E2140 CPU (Obsolete); GPU: None; RAM: 3GB 663MHz DDR2 (1GB 663MHz Kingston + 2GB 800MHz Dynet); M/B: Intel D945GCCR 800MHz FSB (Obsolete); OS: Windows 8 Enterprise N 32-bit] with both CPU cores and on Lenovo K3 Note Phone (K50a40).

Chrome(PC) = Google Chrome Browser v54.0.2840.71 for Windows 32-bit.

Chrome(An) = Google Chrome Browser v54.0.2840.68 for Android.

IE(PC) = Internet Explorer v10.0.9200.17413 for Windows 32-bit.

UC(An) = UC Browser v11.0.5.850 for Android.

 S.No. N (as power of 2) (Iterations)r (Memory Parameter)P (Parallelization)  dkLen (Output Length)Time Taken Browser Used CPUmax Usage Cores Used  MemoryMax UsageComment 
 110 8 1 256 1s  Chrome(PC)26%1 13MB My Final Selection for SunCrypt v1  (dkLen was changed later)
 2 118 1 256 3s  Chrome(PC) 47%1 17MB 
3 11 16 2 256 6s Chrome(PC) 99% 2 25MB I had first Selected this for SunCrypt v1 
 411 16 2 256 9s IE(PC) 60% 1 25MB 
5 12 8 1 256 5s Chrome(PC) 56% 1 21MB 
6 12 8 2 256 6s Chrome(PC)99% 2 25MB 
7 12 16 2 256  11sChrome(PC) 99% 2 55MB
 8 13 8 1 256 11sChrome(PC) 56% 1 21MB
 9 13 8 2 256 13sChrome(PC) 98% 1 33MB
 10 14 8 1 256 21sChrome(PC) 56% 1 29MB
 11 14 8 2 256 23sChrome(PC)98 % 2 50MB
 12 15 8 1 256 42sChrome(PC) 57% 1 45MB
 13 15 8 2 256 45sChrome(PC) 98% 2 83MBMasterPasswordApp.com uses this config for N r and p
 14 15 8 2 256 62s UC(An) ? ? ?
 15 15 8 3 256 1m29sChrome(PC)First 98% thereafter 56%First 2 cores thereafter 1 core 83MB
 16 16 8 1 256 1m16sChrome(PC) 57% 1 78MB
 17 17 8 1 256 2m47sChrome(PC) 57% 1 144MB

These 9 characters are not used: space(x20) double_Quotes(x22) <(x3C) >(x3E) \(x5C) `(x60) {(x7B) |(x7C }(x7D)

Total 86 characters compatible with masterpasswordapp.com were used which are as follows:

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890@&%?,=[]_:-+*$#!'^~;()./

MasterPasswordapp.com uses N="2^15," r="8," p="2," dkLen="64." This configuration should take (as per the above table calculations) about 62s on UC Browser for Android. The App "Master_Password_1.11.0 Devland" (de.devland.masterpassword) computes on Lenovo K3 Note phone in just 2s.

This shows JavaScript on UC Browser for Android is 31 times slower and on Chrome Browser for Windows 32 bit is 23 times slower.

Thus, for my selection of N="2^11," r="16" and p="2," some faster program should take 9/31 = 0.3s = 3.4 Passwords/s on Lenovo K3 Note phone and 6/23 = 0.26s = 3.83 Passwords/s on "My Computer 2013 win8". For a strong password that is itself chosen to be 100-bit secure, to be broken in 100 years should require 2^100/(100*365*24*60*60) = 401969368413314751870 passwords computations per second = 401969368413314751870/4 = 100492342103328687968 = 10^20 times faster machine.

Thus, my choice of N="2^11," r="16" and p="2" seems to be a good choice for security and bad choice for time wastage of 6s on computer and 9s to 18s on Android phone.

Thus final selection changed to N="2^10," r="8" and p="1" (mnemonic = Single Single Single).

That is now, machine to break above type password should be 100492342103328687968/6 = 16748723683888114661 = 10^19 times faster = Appears to be quite sufficiently secure and fast working choice.


Sunny Saini
19:34, 2016-11-08
++++

2180 characters in password as well as in Domain site were tested OK simultaneously, slight change in any character in either of fields changed the generated password/PIN.


Sunny Saini
15:28, 2016-11-09
++++