PassphraseFailureEnforcer

An interface for enforcing policy when a client fails to provide the right passphrase.

The main purpose of this interface is to prevent an attacker from guessing a passphrase by brute-forcing guessing. It does so by recording failed passphrase events and using past events to determine if the user is locked out and for how long.

This can be implemented in various ways, see SimplePassphraseFailureEnforcer for the trivial non-persistent non-distributed version.

Inheritors