1. Forum
  2. USENET
  3. alt.privacy

  • Re: Password/Passphrase Strength Ranking

    From Stefan Claas@fgrsna.pynnf@vagrearg.eh to alt.privacy.anon-server,alt.privacy on Tuesday, February 18, 2025 15:29:53
    From Newsgroup: alt.privacy

    Nomen Nescio wrote:

    http://www.stack.nl/~galactus/remailers/passphrase-faq.html

    Ah, Galactus, wonder what happened to him and for example Andre Bacard.

    Regards
    Stefan
    --
    Onion Courier Home Server Mon-Fri 15:00-21:00 UTC Sat-Sun 11:00-21:00 UTC ohpmsq5ypuw5nagt2jidfyq72jvgw3fdvq37txhnm5rfbhwuosftzuyd.onion:8080 inbox
    age1yubikey1qv5z678j0apqhd4ng7p22g4da8vxy3q5uvthg6su76yj0y8v7wp5kvhstum
    --- Synchronet 3.21e-Win32 NewsLink 1.2
  • From Stefan Claas@fgrsna.pynnf@vagrearg.eh to alt.privacy.anon-server,alt.privacy on Tuesday, February 18, 2025 17:02:07
    From Newsgroup: alt.privacy

    Nomen Nescio wrote:

    http://www.stack.nl/~galactus/remailers/passphrase-faq.html

    These are examples of passphrases and the PS numbers
    associated with them. If you can work through these and
    get the same numbers, then you are well on your way to
    understanding how to make passphrases good or bad.

    0.280 An average phrase
    There is a sucker born every minute.

    0.761 Phrases with some random letters.
    Ignorance is bliss.
    spgemxk Education cures ignorance.

    0.855 Nonsense phrase
    betty was smoking tires in her peace of pipe organs and playing tuna
    fish.

    1.05 A random bunch of characters.
    A6:o@6 Ls+\` uGX%3y[k

    1.125 Random words
    paper factors difference votes behind chain treaties never group

    1.34 Odd capitalization/punctuation and nonsense.
    Web oF thE Trust is BrokEn cAn You Glue it Back ToGether? and give it
    xRays.


    Well, better check out the entropy of your passwords with:

    https://github.com/706f6c6c7578/entropy https://alecmccutcheon.github.io/Password-Entropy-Calculator/

    For password creation you may check out:

    https://github.com/706f6c6c7578/pwgen
    https://github.com/706f6c6c7578/dwp https://github.com/706f6c6c7578/Argon2id-CLI https://github.com/706f6c6c7578/Argon2id/releases/tag/v0.1.0

    Examples:

    C:\Users\xxxxxxxx\Desktop>dwp+ -d eff.txt -r 7 -p -s -
    Diceware number 1: 52463 - rundown
    Diceware number 2: 24553 - economic
    Diceware number 3: 55455 - spirits
    Diceware number 4: 45251 - preplan
    Diceware number 5: 33454 - hardly
    Diceware number 6: 24625 - egging
    Diceware number 7: 55661 - squeeze

    Complete passphrase: rundown-economic-spirits-preplan-hardly-egging-squeeze

    $ entropy 'rundown-economic-spirits-preplan-hardly-egging-squeeze'
    Password: rundown-economic-spirits-preplan-hardly-egging-squeeze
    Entropy: 307.82 bits

    C:\Users\xxxxxxxx\Desktop>pwgen -n 1
    @bR,=nYdh-4KR

    $ entropy '@bR,=nYdh-4KR'
    Password: @bR,=nYdh-4KR
    Entropy: 83.97 bits

    $ argon2id -p test -s test a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82

    $ entropy 'a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82' Password: a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82 Detected as hex string
    Entropy: 256.00 bits

    Regards
    Stefan
    --
    Onion Courier Home Server Mon-Fri 15:00-21:00 UTC Sat-Sun 11:00-21:00 UTC ohpmsq5ypuw5nagt2jidfyq72jvgw3fdvq37txhnm5rfbhwuosftzuyd.onion:8080 inbox
    age1yubikey1qv5z678j0apqhd4ng7p22g4da8vxy3q5uvthg6su76yj0y8v7wp5kvhstum
    --- Synchronet 3.21e-Win32 NewsLink 1.2
  • From Stefan Claas@fgrsna.pynnf@vagrearg.eh to alt.privacy.anon-server,alt.privacy on Tuesday, February 18, 2025 20:07:23
    From Newsgroup: alt.privacy

    Stefan Claas wrote:

    $ argon2id -p test -s test a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82

    $ entropy 'a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82' Password: a26b1128e1240639f2379b66fc56ea00a0e93e976aade1227cc5b34b38d00a82 Detected as hex string
    Entropy: 256.00 bits

    Another way to generate a password and salt for argon2id could be this:

    dprime -p test -s test -h
    Generated 1024-bit Prime (hex): 97be230c60497b24a0f42c9835b1002e33a7ca7574d441a10845c285c985c6d3483304278e7a26009ab49dd4d4a7f7532912d4c662011a836f46b7083689146700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000425

    $ echo 97be230c60497b24a0f42c9835b1002e33a7ca7574d441a10845c285c985c6d3483304278e7a26009ab49dd4d4a7f7532912d4c662011a836f46b7083689146700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000425 | half
    lh: 97be230c60497b24a0f42c9835b1002e33a7ca7574d441a10845c285c985c6d3483304278e7a26009ab49dd4d4a7f7532912d4c662011a836f46b70836891467
    rh: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000425

    $ argon2id -p 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000425 -s 97be230c60497b24a0f42c9835b1002e33a7ca7574d441a10845c285c985c6d3483304278e7a26009ab49dd4d4a7f7532912d4c662011a836f46b70836891467
    60490b453f73dcb53bdd62ba35fc53811caeb4515d6ec782a32caac1f204f6d0

    https://github.com/706f6c6c7578/dprime
    https://github.com/706f6c6c7578/half

    Regards
    Stefan
    --
    Onion Courier Home Server Mon-Fri 15:00-21:00 UTC Sat-Sun 11:00-21:00 UTC ohpmsq5ypuw5nagt2jidfyq72jvgw3fdvq37txhnm5rfbhwuosftzuyd.onion:8080 inbox
    age1yubikey1qv5z678j0apqhd4ng7p22g4da8vxy3q5uvthg6su76yj0y8v7wp5kvhstum
    --- Synchronet 3.21e-Win32 NewsLink 1.2