Hardware/OS must provide a trusted path
– Windows CNTL-ALT-DEL
– keyboard and display must have trusted paths to OS
– Special kind of display under OS control
popular password:
123456, password, qwerty, 123456789, baseball, football
publicly available software can do
10^8 MD5 hashes/sec on a GPU
Six random upper case/lower case/ digit then 62^6 possible password, about 10 minutes
