Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate feasibility of an "acrostic" option #23

Open
sts10 opened this issue Jul 2, 2024 · 0 comments
Open

Investigate feasibility of an "acrostic" option #23

sts10 opened this issue Jul 2, 2024 · 0 comments

Comments

@sts10
Copy link
Owner

sts10 commented Jul 2, 2024

I noticed that XKCD-password-generator has an option to generate a passphrase that matches an acrostic.

$ xkcdpass --count=5 --acrostic='chaos' --delimiter='|' --min=5 --max=6 --valid-chars='[a-z]'
> collar|highly|asset|ovoid|sultan
> caper|hangup|addle|oboist|scroll
> couple|honcho|abbot|obtain|simple
> cutler|hotly|aortae|outset|stool
> cradle|helot|axial|ordure|shale

I'm assuming this makes the passphrase easier to remember.

One reason I'm hesitant to start development of this feature for Phraze is that I'm not sure how to accurately estimate the entropy of a passphrase generator via this acrostic method. This issue describes some potential pitfalls in this calculation.

Clearly, the entropy calculations depends on whether the word that forms the acrostic is chosen by the user (as xkcdpass does) or chosen randomly by the program. The latter case would lead to a "stronger" passphrase and, mathematically, would be more interesting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant