[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#768772: ITP: xkcdpass -- secure passphrase generator inspired by XKCD 936



[adding bugreport as recipient]

Quoting Ben Finney (2014-11-10 00:33:52)
> Simon McVittie <smcv@debian.org> writes:
> 
> > Does [xkcdpass] have significant advantages over pwqgen, in the
> > passwdqc package?
> 
> Significant advantages:
> 
> * ‘xkcdpass’ provides an implementation of a much-discussed scheme for
>   strong passphrase generation. (Which is not to say the results are
>   stronger than all others; only that these are relatively strong.)
> 
>   I don't know of any other tool implementing the scheme discussed in
>   XKCD 936.

You probably mean other tools in Debian, but if you more generally mean 
other FLOSS tools, there is (an inferior [Crypt::PW44] and) 
[Crypt::XkcdPassword] which I have considered packging.

...or at least I suspect it might be superior, so let me rephrase as 
curious questions for your xkcdpass tool:

  * Does it handle alternate dictionaries (e.g. danish)?
  * Does it handle massaging dictionary (e.g. strip profanities)?

Crypt::XkcdPassword by default uses "the most commonly used words in 
film scripts and television shows", and documents examples of 
adaptations at <https://metacpan.org/pod/Crypt::XkcdPassword::Examples>.  
That's meant not only as friendly competition but also as inspiration 
for "your" tool in case you find those adaption features relevant.


Thanks for packaging this,

 - Jonas


Crypt::XkcdPassword: <https://metacpan.org/pod/Crypt::XkcdPassword>

[Crypt::PW44]: <https://metacpan.org/pod/Crypt::PW44>

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: signature


Reply to: