Hi all, while playing with hashcat, diceware passphrases and entropy checkers I thought why not try to create a little program that you can input your passphrase and it gets converted to a random chars string (40 chars), based either on sha256+base91 or ripemd-160 output.
The idea here is to use phrases which makes no sense but
can easily been remembered and then get converted so that
you always have IMHO good random input for GnuPG.
For that task I created two little Golang programs which
asks the user to input a phrase that makes no sense and
while the user is typing in his passphrase bullets are
displayed, like in pinentry, and then the random 40 chars
get copied to the clipboard, so that users can paste
the passphrase into GnuPG.
In order that this works under Linux/Unix too you need
to install xclip or xsel and don't forget to clear the
clipboard after usage.
Example #1
Input: Alice+eats&red+stones
Output program #1: 8rW3<HnS!UCQ)83@(|t{QRR<KDhJ$`]&k(b;yJjE
Output program #2 a6a549d45f1e5c3fabfba37003541c3fa7f26d13
Exampl #2
Input: grüne-Füchse-fliegen#weich (= green-foxes-flying#soft)
Output program #1: $j{hDH!5m4O[9JcPVBbHLlM^]R]RJ%yJoPr:IxAD
Output program #2: 89216958ceed145dd03a6d23afa7ae93b27457e9
Example #3
Input mixed languages question: has*Bob*deutsche*ÄÖÜs?
Output program #1 fq7Mr469cU#d%uOIX?zG?:^@^y[n152_OUvp8|gB
Output program #2 9f770781c96d72b9974421ea72b523c019714a1f
Hope you like the idea and maybe others come up with better
solutions.
Attached are the two programs as Golang source code.
Please note I am only noodling around with Golang and I am
not a programmer!
Regards
Stefan
Resources:
https://www.gnupg.org/gph/en/manual/c481.html
https://www.armourinfosec.com/password-cracking-with-hashcat/
http://passwordstrengthcalculator.com/index.php
http://rumkin.com/tools/password/passchk.php
ep_sha256+base91.go
Description: Binary data
ep_ripemd160.go
Description: Binary data
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
