|
1 | 1 | MOAC |
2 | 2 | ==== |
3 | 3 |
|
4 | | -[](https://godocs.io/git.sr.ht/~seirdy/moac) |
| 4 | +[](https://godocs.io/git.sr.ht/~seirdy/moac) [](https://builds.sr.ht/~seirdy/moac) |
5 | 5 |
|
6 | 6 | [](https://sr.ht/~seirdy/MOAC) [](https://gitlab.com/Seirdy/moac) [](https://github.com/Seirdy/moac) [](https://codeberg.org/Seirdy/moac) |
7 | 7 |
|
8 | | -[](https://builds.sr.ht/~seirdy/moac) |
| 8 | +Generate passwords and measure their strength according to physical limits to computation. |
9 | 9 |
|
10 | | -The MOAC repository consists of tools and libraries that take a unique approach to generating passwords and analyzing their strength. This software is concerned only with password strength, and knows nothing about the context in which passwords will be used; as such, it makes the assumption that password guessability is the only metric that matters, and a brute-force attack is constrained only by the laws of physics. It's inspired by a blog post I wrote: [Becoming physically immune to brute-force attacks](https://seirdy.one/2021/01/12/password-strength.html). |
| 10 | +This software is concerned only with password strength, and knows nothing about the context in which passwords will be used; as such, it makes the assumption that password guessability is the only metric that matters, and a brute-force attack is constrained only by the laws of physics. It's inspired by a blog post I wrote: [Becoming physically immune to brute-force attacks](https://seirdy.one/2021/01/12/password-strength.html). |
11 | 11 |
|
12 | 12 | Users provide given values like the mass available to attackers, a time limit for the brute-force attack, and the energy available. `moac` outputs the likelihood of a successful attack or the minimum password entropy for a possible brute-force failure. Entropy is calculated with the assumption that passwords are randomly generated. |
13 | 13 |
|
@@ -36,7 +36,7 @@ sudo make install # Install in /usr/local/ by default |
36 | 36 | Usage (with examples) |
37 | 37 | --------------------- |
38 | 38 |
|
39 | | -For full usage of the command-line executables, see [`moac(1)`](https://git.sr.ht/~seirdy/moac/tree/master/item/doc/moac.1.scd) and [`moac-pwgen(1)`](https://git.sr.ht/~seirdy/moac/tree/master/item/doc/moac-pwgen.1.scd). Manpage sources are in `doc/`. |
| 39 | +For full usage of the command-line executables, see the [`moac(1)`](https://git.sr.ht/~seirdy/moac/tree/master/item/doc/moac.1.scd) and [`moac-pwgen(1)`](https://git.sr.ht/~seirdy/moac/tree/master/item/doc/moac-pwgen.1.scd) manpages. Manpage sources are in `doc/`. |
40 | 40 |
|
41 | 41 | ### Bottlenecks and redundancy |
42 | 42 |
|
@@ -73,7 +73,7 @@ $ moac-pwgen -qm 5.97e24 -t 1.45e17 lowercase uppercase numbers symbols latin |
73 | 73 |
|
74 | 74 | If the same computer instead tried to guess the password `,ȿĢıqɽȂīIJďɖȟMǧiœcɪʊȦĻțșŌƺȰ&ǡśŗȁĵɍɞƋIŀƷ?}ʯ4ůʑʅęȳŞ`, there's a chance that it wouldn't have succeeded in time. |
75 | 75 |
|
76 | | -_Note: given that the Earth wasn't hollow during the book's opening, it's unlikely that the Earth consumed its own mass to compute. Further research is necessary; perhaps it used solar power, or secret shipments of tiny black-hole batteries? Organic life was supposed to provide a large part of its functionality, so maybe we should restrict ourselves to the Earth's biomass._ |
| 76 | +_Note: given that the Earth wasn't hollow during the book's opening, it's unlikely that the Earth consumed its own mass to compute. The Earth is also much warmer than 2.7 kelvins. Further research is necessary: perhaps it used solar power, or secret shipments of tiny black-hole batteries? Organic life was supposed to provide a large part of its functionality, so maybe we should restrict ourselves to the Earth's biomass._ |
77 | 77 |
|
78 | 78 | ### Ideas for other programs that can use `moac` |
79 | 79 |
|
@@ -104,6 +104,29 @@ Those "weird characters" are configurable; check the manpages or GoDoc for more |
104 | 104 |
|
105 | 105 | Starting with v0.3.2, password generation defaults to alphanumerics and basic QWERTY symbols. I figured that this is probably for the best, as long as most of us have to work with software that breaks when encountering non-QWERTY symbols. After all, everyone knows that password entry existed long before [languages besides English](https://blog.tdwright.co.uk/2018/11/06/anglocentrism-broke-my-tests-ignore-localisation-at-your-peril/) were invented. |
106 | 106 |
|
| 107 | +Contributing |
| 108 | +------------ |
| 109 | + |
| 110 | +I try to accommodate everyone's workflow. Here's ways to contribute and how, in my order of preference: |
| 111 | + |
| 112 | +### Bug reports |
| 113 | + |
| 114 | +Preferred and canonical location: <https://todo.sr.ht/~seirdy/MOAC>. Send an email to <mailto:~seirdy/[email protected]> to automatically file a bug, no account needed. |
| 115 | + |
| 116 | +I also check issues in the GitHub, GitLab, and Codeberg mirrors linked at the top of the README, if you prefer. No matter which option you choose, your bug gets emailed to me. |
| 117 | + |
| 118 | +### Patches, questions, and feature requests |
| 119 | + |
| 120 | +Preferred location: <https://lists.sr.ht/~seirdy/moac>. Send emails and patches to <mailto:~seirdy/[email protected]>. |
| 121 | + |
| 122 | +For patches, run `make test` to run the unit tests, and `make lint` to run [golangci-lint](https://github.com/golangci/golangci-lint) and [gokart](https://github.com/praetorian-inc/gokart). |
| 123 | + |
| 124 | +I also check the GitHub, GitLab, and Codeberg mirrors for issues and PRs. |
| 125 | + |
| 126 | +### Direct contact |
| 127 | + |
| 128 | +Check my contact info at the bottom of the manpages. |
| 129 | + |
107 | 130 | Alternatives |
108 | 131 | ------------ |
109 | 132 |
|
|
0 commit comments