A secure, sane-defaults password generator for Unix and GNU/Linux.
- You want a password generator which runs on the command line
- You want a password generator with no dependencies (e.g. gcrypt, openssl)
- You want a password generator with a small amount of code, so you can read and understand it easily
- You want a program which fails loudly at the first sign of trouble
- You trust your kernel's random source, but only when it has been seeded properly
- You want your passwords to be "pronounceable" or "memorable"
- You want a password generator with a GUI
- You have an old kernel or C library without the
getrandom
call in it
# Build program
make
# Generate a 64-character ASCII password
./password-generator
# Specify the length of the generated password
./password-generator 123
# Build image
docker build -t trichards/password-generator .
# Run program
docker run --rm -it trichards/password-generator
- Draw random bytes from the system
getrandom
facility - Lock memory pages from swapping
- Explicitly wipe data from memory
- Produce ASCII character output
- Implement a small number of command-line arguments (flags?)
- Password length
- Number of passwords?
- Others?
- Add unit tests for important features
- Random bytes -> ASCII conversion
- Review everything for security