Date: Tue, 4 Aug 2009 23:00:30 +0100 From: RW <rwmaillists@googlemail.com> To: freebsd-questions@freebsd.org Subject: Re: Secure password generation...blasphemy! Message-ID: <20090804230030.5e3aa49c@gumby.homeunix.com> In-Reply-To: <20090803223427.511879f2.wmoran@potentialtech.com> References: <64c038660908031928v15a76d15g5599e6f3fef936e1@mail.gmail.com> <20090803223427.511879f2.wmoran@potentialtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 3 Aug 2009 22:34:27 -0400 Bill Moran <wmoran@potentialtech.com> wrote: > Modulok <modulok@gmail.com> wrote: > > > > I need a way to generate a lot of secure passwords. So, I read all > > about it. Either people are getting way carried away, or I'm missing > > something... > > You could just use apg ... it's in the ports. By the look of it this was originally DES-based, and was upgraded to use CAST or SHA1. However the seeding from /dev/random seems to have been left at 64 bits (the DES blocksize) plus some extra from gettimeofday(). In practice it's probably good enough, it just seems a bit lame.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090804230030.5e3aa49c>