Pwgen redux
Brandon S. Allbery
allbery at ncoast.UUCP
Sun Dec 4 08:21:05 AEST 1988
Well, there has by now been quite a bit of comment about my password
generator. I've been combining ideas and adding a few of my own, and am now
working on v1.1 of pwgen.
The new features are:
* I've taken the tables out of the pwgen.c file and put them into a
"compiled" binary file. This let me add a few more features easily.
* Frequencies of phonemes and spellings have been added.
* Phoneme "types" can now be defined in the control file. This allows
pwgen to support more complex phoneme combinations, and simplifies
adaptation for languages other than English. (After all, I don't
claim that all languages are pronounced alike. Heck, not everyone
pronounces English the same way; ask a few randomly-chosen people to
pronounce "creek", for example.)
* "Warp" tables have been added. This is a feature where the control
file has lists of alternatives for letters; after a password is built
from phonemes, randomly chosen letters are changed to randomly chosen
alternate letters from a warp table. One or more tables can be selected
on the command line, or pwgen can be told to choose one or more for itself.
* Since the frequency-corrected tables are generated when the control file
is read, it is possible to tell pwgen to randomly mutate the frequencies.
* The RNG is seeded from as many places as possible, which helps to make it
even more random (at best, one may have to know the entire state of the
system in order to deduce the RNG seed!).
* An alternative RNG (the one posted to comp.sources.misc a few weeks ago)
is provided in the code; it is used if the program is compiled with NGRAND
defined.
Again, let me stress that it isn't intended to be *the* answer to the
problem of getting people to choose good passwords; it's mainly an example
of something that *could* be done to improve the situation.
++Brandon
--
Brandon S. Allbery, comp.sources.misc moderator and one admin of ncoast PA UN*X
uunet!hal.cwru.edu!ncoast!allbery <PREFERRED!> ncoast!allbery at hal.cwru.edu
allberyb at skybridge.sdi.cwru.edu <ALSO> allbery at uunet.uu.net
comp.sources.misc is moving off ncoast -- please do NOT send submissions direct
Send comp.sources.misc submissions to comp-sources-misc@<backbone>.
More information about the Comp.unix.wizards
mailing list