Comment 4 for bug 1183213

Revision history for this message
mik (therealmik) wrote :

Ok, I wasn't happy with the first patch, because some systems might not have FPUs.

I've attached a patch that wastes some entropy, but still gives an unbiased /dev/urandom read.

The quality of this program is fairly low overall, probably not suitable for main. The phonemes mode produces a tiny amount of entropy per-character, and that's the default for some reason. The secure mode is only getting fixed now, and could have subtly been sabotaging users. sha1 mode is just silly.

passwdqc has pwqgen, which is a good random passphrase generator that can generate 26 - 81 bits worth of entropy in easily remembered passwords.

For simple random password (pwgen -s style), I have a 50 line public domain python script that I could package if needed.