[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#768772: ITP: xkcdpass -- secure passphrase generator inspired by XKCD 936



 ❦  9 novembre 2014 19:21 +1100, Ben Finney <ben+debian@benfinney.id.au> :

> * Package name    : xkcdpass
>   Version         : 1.2.2
>   Upstream Author : Steven Tobin <steven@steventob.in>
> * URL             : https://pypi.python.org/pypi/xkcdpass/
> * License         : BSD-3
>   Programming Lang: Python
>   Description     : secure passphrase generator inspired by XKCD 936
>       A flexible and scriptable password generator which generates strong
>       passphrases, inspired by XKCD 936:
>       .
>           $ xkcdpass
>           > correct horse battery staple

The attribution is misleading. While xkcd has popularized this way of
getting password, it was previously known as diceware:
 http://world.std.com/~reinhold/diceware.html

It would be nice to mention that.

Also, the provided list of words is quite large and may use long words
and derivative which may make the password more complicate to
memorize. For example, there are both "acknowledgment" and
"acknowledgement". The original list of words from diceware is 7776
words long which provides a 90bit security for a 7-word passphrase.
-- 
panic ("Splunge!");
	2.2.16 /usr/src/linux/drivers/scsi/psi240i.c

Attachment: signature.asc
Description: PGP signature


Reply to: