search

heinrich-ulbricht / wuerfelware-passphrases-for-keepass

Würfelware - Passphrases for KeePass
GNU General Public License v3.0
29 stars 5 forks source link

FeatureRequest: additional delimiter between words #4

Open sir106 opened 6 years ago

sir106 commented 6 years ago

as mentioned in the official diceware docs it would be great of this plugin would support to delimit the words by a (random) character.

--- OFFICIAL DOCS --- For extra security without adding another word, insert one special character or digit chosen at random into your passphrase. Here is how to do this securely: Roll one die to choose a word in your passphrase, roll again to choose a letter in that word. Roll a third and fourth time to pick the added character from the following table:

Third Roll        
1 2 3 4 5 6

F 1 ~ ! # $ % ^ o 2 & * ( ) - = u 3 + [ ] \ { } r 4 : ; " ' < > t 5 ? / 0 1 2 3 h 6 4 5 6 7 8 9

For the technically inclined, each word in your Diceware passphrase yields 12.9 bits of entropy, the way passphrase security is measured. A five word Diceware passphrase would have an entropy of at least 64.6 bits; six words would have 77.5 bits, seven words 90.4 bits, eight words 103.2 bits. Inserting a letter at random adds about 10 bits of entropy. All this assumes, of course, that you actually keep your passphrase a secret. --- EOF --- source: http://world.std.com/~reinhold/diceware.html#Diceware%20in%20Other%20Languages%7Coutline

heinrich-ulbricht commented 6 years ago

My goal was to generate passphrases that can be easily memorized. Inserting special characters makes the passphrases (or is it a password again?) harder to memorize. Other ways to increase the entropy would be adding words to the passphrase or to add words to the word list the passphrase is generated from.

sergeevabc commented 5 years ago

Alas, some services does not allow passwords without mixed set of characters.

willie68 commented 5 years ago

Why not use the spaces between? Please consider to add other seperators (than spaces) to the generator, as an option. I would love this.

heinrich-ulbricht commented 5 years ago

@sergeevabc I HATE services imposing password length or character restrictions on me. Unfortunately there are many out there. If needed by the service I add the wanted characters at the end of the password, just to make the UI shut about about it. @willie68 @sergeevabc Currently I have no plans adding more configuration options since there would have to be many of them to cover a wide range of services.

mason-ftl commented 4 years ago

In the code, I see that the delimiter is configured to be a space. In the discussion above, I see that you'd prefer not to add more configuration options because you feel there would be too many permutations. However, what about simplifying the requirement to a fixed default and one fixed alternate? For example: have a space as the default and a hyphen as the alternate.

pbl987 commented 4 years ago

@sergeevabc I HATE services imposing password length or character restrictions on me. Unfortunately there are many out there. If needed by the service I add the wanted characters at the end of the password, just to make the UI shut about about it. @willie68 @sergeevabc Currently I have no plans adding more configuration options since there would have to be many of them to cover a wide range of services.

Come on. It is otherwise a really nice programm.