[PATCH] stop using pwgen

ilf ilf at zeromail.org
Sun Dec 18 15:02:44 CET 2016


Jason A. Donenfeld:
> I'll seriously consider replacing pwgen. I didn't know it was so 
> horrible. I'll investigate and make a decision.

Thanks Antoine for writing this patch.
And thanks Jason for considering it.

I fully support moving away from pwgen.

As brought up a month ago, I propose to "generate passwords natively 
instead of dependency": 
https://lists.zx2c4.com/pipermail/password-store/2016-November/002468.html

Jason A. Donenfeld:
> I like the idea of using /dev/urandom directly, but piping it into 
> base64 is a terrible idea.

I also proposed a method to do this without base64:

ilf:
> Here's a simple way to generate passwords from /dev/random directly in 
> shell:
> tr -dc "[:graph:]" < /dev/urandom | head -c 32
> We could also use "alnum" instead of "graph" and/or "base64" instead of 
> "head".

Thanks, and keep up the good work!

-- 
ilf

Über 80 Millionen Deutsche benutzen keine Konsole. Klick dich nicht weg!
		-- Eine Initiative des Bundesamtes für Tastaturbenutzung
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20161218/e2b07e13/attachment.asc>


More information about the Password-Store mailing list