Public bug reported:

Pasaffe uses the "apg" utility to generate random passwords.
Unfortunately, apg defaults to generating "pronounceable" passwords
instead of random ones, which results in generated passwords not being
as strong as they should, and has the numeric placed at the end of it
most of the time.

This has been corrected by the following upstream commit:

http://bazaar.launchpad.net/~mdeslaur/pasaffe/trunk/revision/573

[Test Case]
1- open pasaffe
2- create new entry
3- click the button to generate random passwords

Pronounceable passwords look like this, typically with a digit at the
end:

duhoifed0Ok&
cagMovtefEk4
NuzHykdieds6
chaiDrunsIf6
Biahickwyek6
GhoysbyPhit2

Truly random passwords should look more like this:

YL48AGzXIQ1g
ClSLdxI2U1RF
g3r5NYBFNFAQ
ZZ0HsVHslwNB
Xve3zaIF6uNj
vJvX9v0RIXYv

[Regression potential]

This code only touches the password generation code, if it breaks it
will no longer generate random passwords.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: pasaffe 0.38-0ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-24.46-generic 3.13.9
Uname: Linux 3.13.0-24-generic x86_64
ApportVersion: 2.14.1-0ubuntu3
Architecture: amd64
CurrentDesktop: Unity
Date: Fri Apr 18 14:27:44 2014
InstallationDate: Installed on 2013-11-26 (142 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
PackageArchitecture: all
SourcePackage: pasaffe
UpgradeStatus: Upgraded to trusty on 2014-01-17 (90 days ago)

** Affects: pasaffe (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug trusty

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1309685

Title:
  generated passwords aren't random enough

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pasaffe/+bug/1309685/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to