Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FeatureRequest: additional delimiter between words #4

Open
sir106 opened this issue Aug 11, 2018 · 6 comments
Open

FeatureRequest: additional delimiter between words #4

sir106 opened this issue Aug 11, 2018 · 6 comments

Comments

@sir106
Copy link

sir106 commented Aug 11, 2018

as mentioned in the official diceware docs it would be great of this plugin would support to delimit the words by a (random) character.

--- OFFICIAL DOCS ---
For extra security without adding another word, insert one special character or digit chosen at random into your passphrase. Here is how to do this securely: Roll one die to choose a word in your passphrase, roll again to choose a letter in that word. Roll a third and fourth time to pick the added character from the following table:

Third Roll        
1 2 3 4 5 6

F 1 ~ ! # $ % ^
o 2 & * ( ) - =
u 3 + [ ] \ { }
r 4 : ; " ' < >
t 5 ? / 0 1 2 3
h 6 4 5 6 7 8 9

For the technically inclined, each word in your Diceware passphrase yields 12.9 bits of entropy, the way passphrase security is measured. A five word Diceware passphrase would have an entropy of at least 64.6 bits; six words would have 77.5 bits, seven words 90.4 bits, eight words 103.2 bits. Inserting a letter at random adds about 10 bits of entropy. All this assumes, of course, that you actually keep your passphrase a secret.
--- EOF ---
source:
http://world.std.com/~reinhold/diceware.html#Diceware%20in%20Other%20Languages%7Coutline

@heinrich-ulbricht
Copy link
Owner

heinrich-ulbricht commented Aug 14, 2018

My goal was to generate passphrases that can be easily memorized. Inserting special characters makes the passphrases (or is it a password again?) harder to memorize.
Other ways to increase the entropy would be adding words to the passphrase or to add words to the word list the passphrase is generated from.

@sergeevabc
Copy link

Alas, some services does not allow passwords without mixed set of characters.

@willie68
Copy link

willie68 commented Mar 5, 2019

Why not use the spaces between?
Please consider to add other seperators (than spaces) to the generator, as an option. I would love this.

@heinrich-ulbricht
Copy link
Owner

@sergeevabc I HATE services imposing password length or character restrictions on me. Unfortunately there are many out there. If needed by the service I add the wanted characters at the end of the password, just to make the UI shut about about it.
@willie68 @sergeevabc Currently I have no plans adding more configuration options since there would have to be many of them to cover a wide range of services.

@mason-ftl
Copy link

In the code, I see that the delimiter is configured to be a space. In the discussion above, I see that you'd prefer not to add more configuration options because you feel there would be too many permutations. However, what about simplifying the requirement to a fixed default and one fixed alternate? For example: have a space as the default and a hyphen as the alternate.

@pbl987
Copy link

pbl987 commented Aug 29, 2020

@sergeevabc I HATE services imposing password length or character restrictions on me. Unfortunately there are many out there. If needed by the service I add the wanted characters at the end of the password, just to make the UI shut about about it.
@willie68 @sergeevabc Currently I have no plans adding more configuration options since there would have to be many of them to cover a wide range of services.

Come on.
It is otherwise a really nice programm.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants