按照发音难忘的密码生成算法 [英] Phonetically Memorable Password Generation Algorithms

问题描述

背景

而在健身房有一天，我正在与我的密码锁，并意识到的东西，将是有益的我作为一个程序员。要晓得，我的组合是数字三个独立的组，无论是发音相似，或者有其他关系，使他们很容易记住。例如，25年5月15日，7-17-2，6-24-5。这些例子的似乎的简单易记。

问题

我将如何实施类似的密码的东西吗？是的，它们应该是难以破解，但是它们也应便于最终用户记住。组合锁做到这一点与具有类似的声音号码的组合，并与具有类似的性质（23年7月17日的数字：所有的总理，17卷马上舌后7和23是另外一个素数，且是（出那集），硬一记）。

标准

• 密码应该很容易记住。 狗！狼很容易记住，但一旦攻击者知道了你的网站给出了这种组合，它使无限容易检查。
• 的单词或字母应主要遵循同样的声音（大部分）。
• 在至少8个字母
！
• 在不使用 @＃$％^＆放大器; *（）;'{} _ + LT;＆GT;？，/ 这些标点符号，同时采取适当的硬的密码，没有一个易记的声音。

资源

这个问题是语言无关的，但如果有一个具体的实施对于C＃，我会很高兴听到这一点。

更新

一些用户纷纷表示，这是错误的密码安全。 不要认为这是一个网站。这可能仅仅是为我做我自己的应用程序，根据这些规则生成密码。下面是一个例子。

  

字母   A-C-C-L-I-M-O-P 流，而他们正好是两个   定期的话放在一起   （适应和拖把）。进一步，   当用户的说的这些信件，或   他们说，作为一个字，它是一个真正的   字他们。易记，但   难以破解（字典攻击，   很明显）。

这个问题有两部分目标：

1. 构造从字母发音相近（用头韵）密码或
2. 构造一个网常用单词的密码同样产生第三组字母，是不是在一本字典。

解决方案

您可能想看看：

• 使用助攻并在pronouncable密码生成算法中的 FIPS-181
• Koremutake

Background

While at the Gym the other day, I was working with my combination lock, and realized something that would be useful to me as a programmer. To wit, my combination is three seperate sets of numbers that either sound alike, or have some other relation that makes them easy to remember. For instance, 5-15-25, 7-17-2, 6-24-5. These examples seem easy to remember.

Question

How would I implement something similar for passwords? Yes, they ought to be hard to crack, but they also should be easy for the end user to remember. Combination Locks do that with a mix of numbers that have similar sounds, and with numbers that have similar properties (7-17-23: All Prime, 17 rolls right off the tongue after 7, and 23 is another prime, and is (out of that set), the 'hard' one to remember).

Criteria

• The Password should be easy to remember. Dog!Wolf is easy to remember, but once an attacker knows that your website gives out that combination, it makes it infinitely easier to check.
• The words or letters should mostly follow the same sounds (for the most part).
• At least 8 letters
• Not use !@#$%^&*();'{}_+<>?,./ These punctuation marks, while appropriate for 'hard' passwords, do not have an 'easy to remember' sound.

Resources

This question is language-agnostic, but if there's a specific implementation for C#, I'd be glad to hear of it.

Update

A few users have said that 'this is bad password security'. Don't assume that this is for a website. This could just be for me to make an application for myself that generates passwords according to these rules. Here's an example.

The letters A-C-C-L-I-M-O-P 'flow', and they happen to be two regular words put together (Acclimate and Mop). Further, when a user says these letters, or says them as a word, it's an actual word for them. Easy to remember, but hard to crack (dictionary attack, obviously).

This question has a two-part goal:

1. Construct Passwords from letters that sound similar (using alliteration) or
2. Construct Passwords that mesh common words similarly to produce a third set of letters that is not in a dictionary.

解决方案

You might want to look at:

• The pronouncable password generation algorithm used by apg and explained in FIPS-181
• Koremutake

这篇关于按照发音难忘的密码生成算法的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！