Kyauta Mai Ƙirƙirar Diceware Passphrase

Yadda Yake Aiki

Ƙirƙirar kalmar wucewa tana gudana gaba ɗaya a burauzarka ta amfani da crypto.getRandomValues na Web Crypto API — iri ɗayan tushen bazuwar cryptographic da masu sarrafa kalmar sirri da TLS suke amfani da su. Jerin kalmomi 1,296 na EFF gajere an haɗa su kai tsaye a shafin, don haka babu bukatar sadarwa yayin ƙirƙirawa.

1. 1
   Zaɓen kalma babu son kai

   Don kowane wurin kalma, crypto.getRandomValues yana cika buffer Uint32 da lamba bazuwar da aka goyi bayanta da kayan aiki. Rejection sampling yana zubar da ƙimomin da za su karkatar da rabon, sannan sakamakon yana zaɓen a jerin kalmomi 1,296 na EFF gajere — yana bayar da daidai bits 10.34 na entropy a kowace kalma babu son kai na modulo.
2. 2
   Ƙarin abubuwa na zaɓi da aka haɗa

   Idan ka kunna sauyawa na lamba, ana zaɓen lamba cikakke bazuwar daga 0–99 da iri ɗayan hanya mara son kai kuma an haɗa shi a matsayin chip daban, yana ƙara kimanin bits 6.6. Babbaita harafin farko na kowace kalma tabbatacce ne kuma bai ƙara entropy ba, wanda kayan aikin yake bayyanawa a fili.
3. 3
   Nuni na entropy da lokacin fasawa a lokaci na gaskiya

   Ana lissafta entropy a matsayin yawanKalma × log2(1296), kuma kayan aikin yana canja wannan lambar zuwa kimantawar lokacin fasawa ta amfani da samfuran hari uku da za a zaɓa: gwaji 10/daƙiƙa (kan layi da aka rage), biliyan 10/daƙiƙa (GPU wajen layi), da tiriliyan 100/daƙiƙa (cluster babba). Lissafin yana sabuntawa nan take idan ka canja yawan kalma ko zaɓuɓɓuka.
4. 4
   Sake-jefawa da kwafi na kowace kalma

   Dannawa kowace kalma daban tana maye gurbin wannan kalma kawai da wata sabuwar da aka ƙirƙira — iri ɗayan entropy, mai amfani don musanya kalma mai wahala ba tare da sake ƙirƙirar dukkan kalmar wucewa ba. Ana haɗa harafin ƙarshe da zaɓaɓɓen rabewarka kuma a rubuta shi zuwa clipboard ta Clipboard API na al'ada.

Kayan Aiki Masu Alaƙa