3 ms·
Could you clarify? Is the algorithm deficient? To me that looks like code that indeed checks the strength, so I must be missing something.
by audience_mem 7y ago
Could you clarify?
Is the algorithm deficient?
To me that looks like code that indeed checks the strength, so I must be missing something.
- pharrington 7y agoIt checks the length of a password, along with an arbitrary scalar for repeated characters. It does not do any entropy calculations. The writer of that code at least needs to read https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-22r1a.pdf https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpubli... one more time.