| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
| |
the processing time of very long passwords. Use a simple low entropy estimation
for the remaining characters of a longer password.
|
| | |
|
| |
|
|
|
|
| |
Selftests extracted (removed) from zxcvbn.c and test.c and placed
into test-internals.c
Makefile updated.
|
| |
|
|
|
| |
Test binaries perform additional selftests now.
This helps to detect errors in keyboard layout definitions early.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The previous test stopped when a (any) match for a given substring was
found. While this is slightly faster than an exhaustive search across
all registered keyboard layouts, it could result in a too optimistic
entropy estimation.
Example: The string jkl;'# yield the following entropies depending
whether the UK-keyboard layout had a chance to be tested or not:
Layout Code base Entropy
----------------------------------------------------------------------
US previous bits=17.080 log10=5.142 Multi-word extra bits=1.0
UK this bits=11.116 log10=3.346 Multi-word extra bits=0.0
----------------------------------------------------------------------
The time to perform these checks were identical (i.e. 0.07ms, here).
A new testcase for UK-layout was added.
All legacy tests pass. New test passes. valgrind-check: passed
|
| |
|
|
|
|
|
| |
Two layout fixes around the keys ',' and ';'.
Dvorak layout array size reduced to 47*7.
Test outcome was not affected.
|
| |\
| |
| | |
Fix match for decrementing sequences causing heap corruptions
|
| | |
| |
| |
| |
| | |
This was causing heap corruptions (write past array boundary) in
ZxcvbnMatch for passwords ending with 09 for example
|
| |/
|
|
| |
to match.
|
| |
|
|
|
| |
for this by hannob in commit ad2ef761 works for the current dictionary, but would
fail if a dictionary is used with 49 or more possible characters for one of its nodes.
|
| |
|
|
|
| |
The array PossChars, part of DictWork_t, needs to be one byte larger
to hold the trailing zero byte.
|
| | |
|
| |
|
|
| |
some controlling #defines to beginning of zxcvbn.c
|
| |
|
|
| |
Also allow for repeated sequences.
|
| |
|
|
| |
Also add printing password entropy as log10(guesses)
|
| |\ |
|
| | |
| |
| |
| | |
To build as a shared/static library.
|
| |/
|
|
|
|
| |
Fixes build with gcc 5+
Fixes #1
|
| |
|
