# RoseCliff Algorithm: Making Passwords Dynamic
## 5 Experimental Results and Discussion
### Potential Attacks
#### 5.1.1 Brute Force and Dictionary Attacks  
[PERSON] et al. [34] conducted experiments employing both brute force and dictionary attack techniques. They discovered that the brute force method efficiently unlocked relatively short passwords, typically six to seven characters in length. However, brute force was less effective in cracking passwords consisting of eight or more characters. Interestingly, they found success in using dictionary attacks to parallelize password cracking efforts for longer passwords.  
Combating dictionary attacks, though similar to brute force attacks but more sophisticated--as can be seen in [PERSON] et al. [35]--often requires multiple attempts and can be frustrated when passwords combinations are complex. Recognizing the importance of password length, in our incorporation of dynamism, we ensured an increase in password length and added extra computational steps as suggested by [PERSON] [36]. To further evaluate the robustness of our approach, we subjected the passwords to Passfault--Password Strength Tester [37]. This comprehensive test assessed the strength of both the original passwords and the dynamic passwords, thereby providing insights into the overall security of our password system.  
Passfault was utilized to assess the strength of the passwords listed in Table 1, thereby determining the time required for potential cracking. The results can be seen in Table 3.  
\begin{table}
\begin{tabular}{c c c c c c c} \hline \hline
**Common** & **Password** & **Cipher Text** & **Cipher Text** & **Cipher Text** & **Cipher Text** & **Cipher Text** & **Cipher Text** \\
**Password** & **Used** & **1** & **2** & **3** & **4** & **5** \\ \hline \multirow{3}{*}{Qwerty} & \multirow{3}{*}{123 Qwerty} & 4a63 ae62 & cc195 bd9 & 3e02c66a & 7d063 ff5 & 3 bc0c76 \\  & & b19 dc88a & 19 ebd5e0 & 516e4a72 & f37e120d & 09 afb5 fe \\  & & 164a7... & 4f3f1... & aaa74... & d9b73... & 005 ea... \\ \hline \multirow{3}{*}{Password} & Password & 20 efefa97 & 66a0f0d & 1d76 ab92 & b4451f018 & d9d4516 \\  & & c15 dbed2 & d1a532b & d7 aee954f & ac4583b31 & d1c2a97 \\  & & 098 ba & c7d13... & 17007 & a9578 & 875f7... \\ \hline \multirow{3}{*}{Monkey} & \multirow{3}{*}{59 Mon34} & e403122c & cde4b00c & c45f31 df & a6b8f943 & 695d7366 \\  & & 143531c4 & 147034 ea & 8c654382 & ce466 abe & 32f36009 \\  & & b6c17... & 8c0f6... & d3 cf9... & eae540... & 5e060... \\ \hline \multirow{3}{*}{ILoveYou} & \multirow{3}{*}{ILove2y} & bb9560 ea & 6c4 afda7 & 1d6a5f94 & 6f8e2580 & 9 dd26405 \\  & & d4 fd22f3 & a35 eb797 & e63 aa7 ab & 1213 ee58 & ce515966 \\  & & ed545... & d06f0... & 93 ccc... & 2991c... & 043 ff... \\ \hline \multirow{3}{*}{Priness} & Prin1234 & 54172606 & 026e78a & 64533a24 & d475 ec3d & d40 bce6 \\  & & cc3 ae13d & 19 ye7e97 & f61e50a & 1320c7d & f3b1497 \\  & & 3392e & 4d2 bc... & 450c3... & 48a14... & 58a69... \\ \hline \multirow{3}{*}{Password} & \multirow{3}{*}{Pa12 ss34} & 15540021 & 63795 fcd & 4470851 & bab4108d & e54f7501 \\  & & wofrd & 93 db1451 & 67b1242d & 185d7175 & bc65600a & 5 dc4 ece \\ \cline{1-1}  & & dd7b1... & b50a4... & 64 ccf... & c704e... & a4a28... \\ \hline \hline \end{tabular}
\end{table}
Table 2: Ciphertexts derived from common passwords.  
Notably, base passwords often derived from commonly used ones could be cracked in under a second. Additionally, commonly used passwords augmented with numbers were generally more vulnerable to cracking compared to dynamically generated passwords. This underscores one of the advantages of employing dynamic passwords. The resilience of dynamic passwords varies based on the placement of numbers within commonly used passwords. This emphasizes the importance of the implementation of the RoseCliff method and the strength of a user's password. Specifically, appending or prepending numbers alone can lead to quicker cracking, ranging from 17 days to 31 years. Conversely, incorporating numbers in multiple locations significantly prolongs the time required for potential cracking, thus potentially extending it to centuries.