seabre / password-generator

password-generator

A secure, sane-defaults password generator for Unix and GNU/Linux.

How to know if this password generator is for you

• You want a password generator which runs on the command line
• You want a password generator with no dependencies (e.g. gcrypt, openssl)
• You want a password generator with a small amount of code, so you can read and understand it easily
• You want a program which fails loudly at the first sign of trouble
• You trust your kernel's random source, but only when it has been seeded properly

How to know if this password generator is NOT for you

• You want your passwords to be "pronounceable" or "memorable"
• You want a password generator with a GUI
• You have an old kernel or C library without the getrandom call in it

Getting started

# Build program
make

# Generate a 64-character ASCII password
./password-generator

# Specify the length of the generated password
./password-generator 123

With Docker

# Build image
docker build -t trichards/password-generator .

# Run program
docker run --rm -it trichards/password-generator

Roadmap

• Draw random bytes from the system getrandom facility
• Lock memory pages from swapping
• Explicitly wipe data from memory
• Produce ASCII character output
• Implement a small number of command-line arguments (flags?)
  • Password length
  • Number of passwords?
  • Others?
• Add unit tests for important features
  • Random bytes -> ASCII conversion
• Review everything for security