Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only one 12 letter word #97

Open
westbaystars opened this issue Jul 25, 2024 · 5 comments
Open

Only one 12 letter word #97

westbaystars opened this issue Jul 25, 2024 · 5 comments
Milestone

Comments

@westbaystars
Copy link
Contributor

There appears to be only one 12 letter word: "considerable."

Set the Min Length and Max Length to 12 letters and after many tries, the only resulting word is "Considerable."

%%50$Considerable$Considerable$Considerable$44%%
__97%Considerable%Considerable%Considerable%65__
**88?Considerable?Considerable?Considerable?12**

Either more 12 letter words need to be added or 11 should be the maximum word size.

11 letters also seem to be the same five words as well, though: Temperature, Information, Electricity, Instruments, Netherlands.

@del-leehopper
Copy link

It's a good point.

The word list is here:
https://github.com/bartificer/xkpasswd-js/blob/main/src/lib/dictionaryEN.mjs

I've always wondered how this list was generated. I've always wanted to expand it, but I can understand why you might not (e.g. because certain words might have NSFW meanings or be too obscure for people to know what the word is and remember it).

@westbaystars
Copy link
Contributor Author

westbaystars commented Jul 25, 2024

Blind entropy is still good, especially when you have a range of potential word lengths.

Looking at the "Statistics" box, the calculated "full knowledge" bits appear to be the problem. So if one knows that the password was generated with this tool with words 11 characters long, that is consistently 29 bits of entropy, which one wants to be above 52 bits (according to the information box).

@del-leehopper
Copy link

Just FYI, I think the entropy calculation wasn't accurate from the last time I saw it. I'm not sure if someone has fixed it yet, so check out the issues to be sure.

@hepabolu
Copy link
Contributor

The dictionary was taken straight out of the old Perl code. I had also already noted the single 12-letter word, but I haven't investigate further, because I was focusing on other functionality.
I want to look into this further when work starts on adding multiple dictionaries.

@hepabolu hepabolu added this to the 2.0 Release milestone Aug 18, 2024
@westbaystars
Copy link
Contributor Author

No worries. This seems like a very low priority. Most of the presets deal with words between 4 and 8 (inclusive) characters in length.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants