Hector Martin

Password Creation in the Presence of Blacklists, USEC '17, http://www.passwordresearch.com/papers/paper650.html … Didn't measure such a large blacklist though.

And based on the 99.2% of Hunt's hashes I've cracked so far, if you simply require 12 characters minimun, 80% of his list is unnecessary.

And if you are hashing your users' passwords with high-cost bcrypt or scrypt, a smaller blacklist provides good cross-coverage

Do you think people could estimate a blacklist size based on a specific hash speed, or more broad guidelines than that?

That is a super interesting idea, and I bet quite possible! A calculator would need to let the user select their threat model variables.

I feel the need to mention this paper by @CormacHerley about password blacklists and bloom filters: https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/popularityISeverything.pdf …

And I like to add it's follow up work https://www.usenix.org/system/files/conference/soups2017/soups2017-segreti.pdf …

At least I'm reinventing better and better wheels. I must be on to something! ;)