Dictionary Attack

• online

• offline

Countering Password Guessing

• Deny access to C

• Add delay to L when incorrect several times in a row

• Increase time to compute f(a)