Skip to content

lebinh/correct-horse

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Correct Horse

Simple way to create easy to read out, easy to type (for Vietnamese at least), and (sometime) easy to remember password using Vietnamese words.

How?

For now:

$ python horse.py
số học.đèn pin.liền tay.tự học

$ python horse.py 6
tị nạn.ngay khi.sư tử.máu tham.hồ nghi.song toàn

It's probably better to use the un-accented version of the password, i.e. so hoc.den pin.lien tay.tu hoc.

FAQ

What's wrong with random alpha-numeric password?

Try reading PgCt4xDkXf to another person, or writing it on a phone. I know you can use a password manager to help with that. But inevitably, there will be times you want to just read it out loud for another person sitting next to you on the couch, or typing it on your shinny new phone.

How strong is the password?

The used words list contains 7536 compound words, and 7307 unique un-accented words. Using the default 4-words password, that gives ~2.85e15 possible combinations for the generated output. Assume an attacker with a password cracking rate of 10 millions attempts per second (1), it will take them on average 4.5 years to crack a password generated by this method.

Using GPUs or specialized software/hardware, an attacker might be able to test 10 billions password per second (1), that will reduce the time to crack a 4-words password to about 5 days. Adding another word increase the cracking time to ~100 years. Using at least 5 words is thus recommended if you are using this for really sensitive application.

Each word in the generated password has log₂(7307), or about 12.835, bits of entropy. So the default 4-words password will have ~51.34 bits of entropy. That assumes the attacker knows the password is generated by this repo, otherwise it will just be a 20-30 lowercase letters password, which is more than 100 bits of entropy.

What's horse?

The correct one, of course!

XKCD 936 - Password Strength

Credits

The Viet11K.txt words list was composed by Ho Ngoc Duc: https://www.informatik.uni-leipzig.de/~duc/software/misc/wordlist.html

About

XKCD style password in Vietnamese

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages