pw

pw generates passswords statelessly, much like a brain wallet. pw also has several options to encode passwords to satisfy several common password requirements.

Dependencies

• dbus on Linux (libdbus-1-dev on Ubuntu)

Crypto

pw uses pbkdf2 with sha256 to stretch your password, with the supplied entity as the salt. It then base64 encodes the resulting stretched bytes, and grabs the first N (default 10) characters of that as a password. Since each character in base64 represents 2⁶ of entropy (hence the 64), a password of length 10 is roughly 60 bits of entropy. By comparison, "correct horse battery staple" is only 44.

TODO

• use a better hash function for pbkdf2 (sha512?)
• encrypt the config file, and add an edit mode