Skip to content

Increase default dictionary size, use more efficient dictionary algorithm#3

Merged
bdmac merged 1 commit intobdmac:masterfrom
peterkovacs:patch-1
Jan 17, 2014
Merged

Increase default dictionary size, use more efficient dictionary algorithm#3
bdmac merged 1 commit intobdmac:masterfrom
peterkovacs:patch-1

Conversation

@peterkovacs
Copy link
Contributor

I increased the size of the default dictionary to the top 10,000 passwords. I swapped in a more efficient dictionary comparison algorithm (based on regexps). A few miscellaneous cleanups.

@bdmac
Copy link
Owner

bdmac commented Jan 16, 2014

Hi Peter,

Thanks for the PR! I'm a bit worried that some of the changes you made seem to have altered the calculation of the entropy of a given password. Can you explain if this impact is truly significant or not?

@peterkovacs
Copy link
Contributor Author

Hi Brian --

I believe that the entropy changes are due to two factors:

  1. I'm including the entire 10k common password list since the comparisons are processed more efficiently.
  2. I'm looking for longest matches first, so when we look at something like password12345678 we're now finding password as the initial substring (for example, we might actually be finding something like password1).

I believe that accounts for the entropy changes in the tests.

bdmac added a commit that referenced this pull request Jan 17, 2014
Increase default dictionary size, use more efficient dictionary algorithm
@bdmac bdmac merged commit 46c2fd3 into bdmac:master Jan 17, 2014
@bdmac
Copy link
Owner

bdmac commented Jan 17, 2014

Thanks!

@peterkovacs peterkovacs deleted the patch-1 branch January 17, 2014 19:59
jacksenechal added a commit to jacksenechal/strong_password that referenced this pull request Nov 8, 2018
Based on bdmac#3, the dictionary is now 10k words long instead of 500. (I was glad to see that! I was worried I was going to have to make that PR :-)

Also worth asking: Are these Todo items still relevant?
bdmac pushed a commit that referenced this pull request Jul 8, 2019
Based on #3, the dictionary is now 10k words long instead of 500. (I was glad to see that! I was worried I was going to have to make that PR :-)

Also worth asking: Are these Todo items still relevant?
davegudge added a commit to davegudge/strong_password that referenced this pull request Jan 19, 2023
Update the metric for the 'most common passwords'.

Related to: bdmac#3
@davegudge davegudge mentioned this pull request Jan 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants