On Mon, Mar 30, 2009 at 9:22 PM, Damian Myerscough
I have just done some research on SSH and S/Key and I read that S/Key
withstand a brute forced attack 
True, but We can lock out an account after 10 (or 100) invalid attempts.
Brute-force will require more than that number of attempts.
A six latter password will require few hundred (~380) million generations.
Sent from: Calcutta WB India.