{"query": "The strength of a password, in bits", "count": 20, "results": [{"id": "card_works_password", "title": "The strength of a password, in bits", "shelf": "the-works", "surface": "secular", "snippet": "A 12-character password from a 95-symbol keyboard carries about 79 bits of entropy — H = L·log₂(N); and a CVSS score of 9.1 is, by the standard, a critical vulnerability.  Worked & sealed by the engin", "authority_tier": "verified", "source": "The Works — worked & sealed", "readable": false, "generated": false}, {"id": "card_theory_cryptographic_security", "title": "Cryptographic security (hashing, checksums, PKI)", "shelf": "theories", "surface": "secular", "snippet": "Cryptographic security (hashing, checksums, PKI) — an engine domain that can touch it: cybersecurity. Calibration: seals — digests and signatures verify exactly. Three different things people routinel", "authority_tier": "reference", "source": "The Theory Assay — calibrated, not judged (docs/THEORY_CATALOG.md)", "readable": false, "generated": false}, {"id": "card_domchk_cybersecurity_claimed_entropy_bits", "title": "Cybersecurity: entropy bits", "shelf": "cybersecurity", "surface": "secular", "snippet": "A worked check in cybersecurity: entropy bits.\n\nGIVEN\n  charset_size = 94\n  cidr_prefix = 24\n  cvss_base_score = 9.1\n  password_length = 16\n  port_number = 443\n  tls_version = 1.2\n\nCLAIMED\n  claimed_e", "authority_tier": "reference", "source": "The verifier's own documented relation, and a run this engine performed against it (deterministic; re-runnable with tools/domain_goldens.py)", "readable": false, "generated": false}, {"id": "card_tool_sha256", "title": "SHA-256 / BLAKE3 cryptographic hashing", "shelf": "tools", "surface": "secular", "snippet": "SHA-256 / BLAKE3 cryptographic hashing — cryptography. GOOD AT: a fixed-size, collision-resistant fingerprint of any input — same bytes always hash the same, different bytes practically never collide.", "authority_tier": "battle-tested standard", "source": "The Tool Concordance — discern, connect, incorporate", "readable": false, "generated": false}, {"id": "card_src_rfc_3244", "title": "RFC3244 — Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols", "shelf": "rfcs", "surface": "secular", "snippet": "RFC3244: Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols (February 2002). Status: INFORMATIONAL.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_src_pron_passwords", "title": "passwords", "shelf": "pronunciation", "surface": "secular", "snippet": "passwords: pronounced (ARPABET) P AE1 S W ER2 D Z. From the CMU Pronouncing Dictionary — the standard machine-readable pronunciations of North American English.", "authority_tier": "reference", "source": "CMU Pronouncing Dictionary (cmudict) — BSD-2-Clause, Carnegie Mellon", "readable": false, "generated": false}, {"id": "card_src_pron_password", "title": "password", "shelf": "pronunciation", "surface": "secular", "snippet": "password: pronounced (ARPABET) P AE1 S W ER2 D. From the CMU Pronouncing Dictionary — the standard machine-readable pronunciations of North American English.", "authority_tier": "reference", "source": "CMU Pronouncing Dictionary (cmudict) — BSD-2-Clause, Carnegie Mellon", "readable": false, "generated": false}, {"id": "card_calc_v_cybersecurity_password_entropy", "title": "Password entropy", "shelf": "calculations", "surface": "secular", "snippet": "Password entropy — cybersecurity. Formula: H = L log2(N). Canonical FORM: logarithmic (y = k * log(x / x0)) — engine verifier cybersecurity.password_entropy — the deterministic check the concordance r", "authority_tier": "reference", "source": "The Calculation Map — every calculation, mapped by form", "readable": false, "generated": false}, {"id": "card_v_dcca79ff2b8e", "title": "H = 12·log₂(95) ≈ 78.84 bits · CVSS 9.1 → critical", "shelf": "cybersecurity", "surface": "secular", "snippet": "Verdict: HOLDS.\n• cybersecurity.password_entropy: H = 78.84 bits (matches claim)\n• cybersecurity.cvss_severity: CVSS 9.1 → 'critical' (matches claim)\nSealed and independently re-checkable: https://nar", "authority_tier": "engine", "source": "Verified by the engine — cybersecurity", "readable": false, "generated": false}, {"id": "card_src_port_tcp_586_password_chg", "title": "Port 586/tcp — password-chg", "shelf": "networking", "surface": "secular", "snippet": "Port 586/tcp is assigned to password-chg: Password Change.", "authority_tier": "reference", "source": "IANA Service Name and Port Number Registry (public domain)", "readable": false, "generated": false}, {"id": "card_src_port_udp_586_password_chg", "title": "Port 586/udp — password-chg", "shelf": "networking", "surface": "secular", "snippet": "Port 586/udp is assigned to password-chg: Password Change.", "authority_tier": "reference", "source": "IANA Service Name and Port Number Registry (public domain)", "readable": false, "generated": false}, {"id": "card_src_rfc_4746", "title": "RFC4746 — Extensible Authentication Protocol (EAP) Password Authenticated Exchange", "shelf": "rfcs", "surface": "secular", "snippet": "RFC4746: Extensible Authentication Protocol (EAP) Password Authenticated Exchange (November 2006). Status: INFORMATIONAL.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_seal_4c2d06e79983abaf6a8dc6f9e2dfa38490c4fe471d984c16c96145f6aa16e0fc", "title": "Receipt 4c2d06e79983… — sealed: record", "shelf": "seals", "surface": "secular", "snippet": "{\n \"anchors\": [],\n \"axis_coords\": {\n  \"axis\": \"cybersecurity\",\n  \"dimensions\": [\n   \"authority_trust\",\n   \"encoding\",\n   \"physical_substance\",\n   \"reasoning\",\n   \"time_sequence\"\n  ]\n },\n \"gate_results", "authority_tier": "engine_derived", "source": "Narrow Highway engine — sealed record", "readable": false, "generated": false}, {"id": "card_src_word_password", "title": "password", "shelf": "dictionary", "surface": "secular", "snippet": "password: (noun) a secret word or phrase known only to a restricted group — syn: watchword, word, parole, countersign", "authority_tier": "reference", "source": "WordNet 3.0, Princeton University (WordNet License)", "readable": false, "generated": false}, {"id": "card_seal_b932b3734836aacde01486b2cf5a31e51fcab5730612e1cccc3fa8e9dcfd2fd4", "title": "Receipt b932b3734836… — sealed: record", "shelf": "seals", "surface": "secular", "snippet": "{\n \"anchors\": [],\n \"axis_coords\": {\n  \"axis\": \"cybersecurity\",\n  \"dimensions\": [\n   \"authority_trust\",\n   \"encoding\",\n   \"physical_substance\",\n   \"reasoning\",\n   \"time_sequence\"\n  ]\n },\n \"gate_results", "authority_tier": "engine_derived", "source": "Narrow Highway engine — sealed record", "readable": false, "generated": false}, {"id": "card_src_rfc_972", "title": "RFC972 — Password Generator Protocol", "shelf": "rfcs", "surface": "secular", "snippet": "RFC972: Password Generator Protocol (January 1986). Status: UNKNOWN.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_src_rfc_3112", "title": "RFC3112 — LDAP Authentication Password Schema", "shelf": "rfcs", "surface": "secular", "snippet": "RFC3112: LDAP Authentication Password Schema (May 2001). Status: INFORMATIONAL.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_src_rfc_9382", "title": "RFC9382 — SPAKE2, a Password-Authenticated Key Exchange", "shelf": "rfcs", "surface": "secular", "snippet": "RFC9382: SPAKE2, a Password-Authenticated Key Exchange (September 2023). Status: INFORMATIONAL.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_src_rfc_1760", "title": "RFC1760 — The S/KEY One-Time Password System", "shelf": "rfcs", "surface": "secular", "snippet": "RFC1760: The S/KEY One-Time Password System (February 1995). Status: INFORMATIONAL.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}, {"id": "card_src_rfc_1929", "title": "RFC1929 — Username/Password Authentication for SOCKS V5", "shelf": "rfcs", "surface": "secular", "snippet": "RFC1929: Username/Password Authentication for SOCKS V5 (March 1996). Status: PROPOSED STANDARD.", "authority_tier": "reference", "source": "The RFC Index (RFC Editor / IETF) — public domain", "readable": false, "generated": false}], "house": {"door": "FIND", "kind": "cards", "trail": "results", "seal": null, "next_step": {"do": "open the top card", "door": "FIND", "tool": "card_get", "params": {"id": "card_works_password"}}, "ends": "a verdict or a card · the trail · a seal · one next step"}}