To summarize, let me inform you that a password with a minimum configuration in MonoSignature mode requires 12 characters, with uppercase and lowercase letters, numbers, and symbols. This configuration generates a vast number of possibilities that, for a potential attacker, would take current computers approximately 14.9 billion years to test all possible combinations.

In practical terms, a brute force attack on the AES 256 GCM cryptogram that safeguards the secret you have protected is impractical.

If you are using a multi-signature setup or have established a password longer than the standard 12 characters, the security level increases exponentially.

You can rest assured. With current global technology, the likelihood of a successful brute force attack is exceedingly low.

Please find specific technical details below.

Security Estimation for a 12-Character Password

This section provides an analysis of the security of a 12-character password composed of uppercase letters, lowercase letters, numbers, and symbols, explaining the total possible combinations and the estimated time required to break it through brute force.

1. Number of Possible Combinations

When you create a password using 12 characters where each character can be an uppercase letter, lowercase letter, number, or symbol, you’re generating combinations within a very large “space” of possibilities. Here’s a step-by-step breakdown:

​​​​

• Types of characters and their possible counts:

  • Lowercase letters: 26 (from 'a' to 'z').

  • Uppercase letters: 26 (from 'A' to 'Z').

  • Numbers: 10 (from '0' to '9').

  • Common symbols: Approximately 32 symbols available on most keyboards.

• Total possible characters: We add all character types to determine how many options exist for each position in the password. Total: 26 + 26 + 10 + 32 = 94

• Possible combinations for a 12-character password: For a password with 12 characters, where each position can be any of the 94 characters available, the number of possible combinations is calculated using exponents: Total combinations = 94^12

• This means that for each of the 12 positions in the password, you have 94 options. By multiplying the options for each position, we get the total number of combinations.

• Resulting number of combinations: 94^12 is approximately 4.7 x 10^23 combinations, or 470,000,000,000,000,000,000,000 possibilities.

This large number illustrates how difficult it would be to guess or attempt all possible combinations. With a 12-character password using this full range of characters, the number of combinations is so high that brute force attempts would require enormous amounts of time.

​

2. Estimated Time to Break the Password

To calculate the time required to break a password, we need to understand the processing speed of the attacking system, specifically how many combinations it can attempt per second.

• Processing Speed (Attempts per Second):

  • Standard modern computer: approximately 1 million combinations per second (10^6 attempts/sec).

  • Advanced supercomputers or networks: around 10 billion combinations per second (10^9 attempts/sec).

• Estimated Time Calculation:
  With 4.7 x 10^23 possible combinations, we divide this number by the speed of attempts to obtain the estimated time.

  • Case 1: Standard computer (1 million attempts/sec)

    • Estimated time: 4.7 x 10^23 / 10^6 = 4.7 x 10^17 seconds = approximately 14.9 billion years.

  • Case 2: Supercomputer (10 billion attempts/sec)

    • Estimated time: 4.7 x 10^23 / 10^9 = 4.7 x 10^14 seconds = approximately 14,900 years.

In conclusion, even with advanced technology, breaking a 12-character password using uppercase letters, lowercase letters, numbers, and symbols remains extremely difficult and would require an impractical amount of time.

​

All these calculations are based on the assumption that someone obtains access to a card containing your encrypted secret and attempts to brute-force it using computers available to the public or even a supercomputer, which only a few entities worldwide possess. This would mean the attacker can automate the process of testing every possible combination. If the attacker attempts to do this using a Cuvex device, the time required could increase exponentially, potentially thousands of times over, as human error and the manual process would render such an attempt virtually impossible.

​

In any case, if you enter the password for your secret twice in a row in an attempt to decrypt it, the Cuvex device will lock for 5 minutes. This further adds to the immense complexity of finding the correct password.

​

Rest assured! Cuvex has been designed to do something very complex in a very simple way, implementing military-grade security in a system accessible to everyone.