Kyauta Kebul Generator

Yadda Yake Aiki

Ana ƙirƙirar kalmomin sirri gaba ɗaya a burauzarka ta amfani da crypto.getRandomValues() na Web Crypto API — iri ɗayan tushen bazuwar cryptographic da burauza suke amfani da su don TLS. Babu Math.random(), babu uwar garke, babu bukatar sadarwa na kowane iri.

1. 1
   Haɗin tarin harafi

   Bisa zaɓinka na akwatin dubawa, kayan aikin yana gina jeri daban don babban harafi, ƙaramin harafi, lambobi, da alamomi. Idan 'cire haruffa masu kama' a kunne yake, ana cire haruffa masu ruɗi na gani kamar 1, l, I, 0, da O daga kowace tari kafin a gina tarin.
2. 2
   Zaɓen bazuwar da aka gwada-jefarwa

   Ana cika kowace matsayin harafi ta amfani da crypto.getRandomValues() tare da rejection sampling: idan wata ƙimar bazuwar danye ta faɗi a wutsiyar rabon da take son kai, ana zubar da ita kuma a sake ɗauko. Wannan yana kawar da son kai na modulo wanda zai sa wasu haruffa su fi yiwuwa fiye da wasu ta hanyar lissafi.
3. 3
   An tabbatar da rufi na aji

   Bayan zaɓen cikakkiyar kalmar sirri, kayan aikin yana duba ko akwai akalla harafi guda daga kowace aji da aka zaɓa. Idan ba haka ba, yana sake ɗaukar dukkan kalmar sirri kuma yana sake dubawa — har zuwa sau 100 — maimakon musanya haruffa zuwa wurare tsayayye, wanda zai karkatar da rabon.
4. 4
   Kimantawar entropy da lokacin fasawa

   Kayan aikin yana lissafta entropy a matsayin tsawo × log2(girman tari) kuma yana kimanta lokacin fasawa ta amfani da lissafin sararin-log a kan wani asalin GPU na gwaji biliyan 100 a kowace daƙiƙa (dacewa ga hash mai sauri kamar MD5; kalmomin sirri da bcrypt/Argon2 ke kariya za su ɗauki lokaci mai tsawo sosai). Dukkan lambobi biyu suna sabuntawa nan take idan ka canja saitunan.

Kayan Aiki Masu Alaƙa