On: Show HN: Evilpass – A slightly evil password stren...

[Cyph0n]

> I can memorize a 20-character string for a short time.

Now I see why such a system works for you. Very few people can do that in case you didn't know.

[dfox → Cyph0n]

There is probably some room for optimizing this by changing the used character set or using some rules for producing "pronounceable" strings.

[Spivak → dfox]

There is already a tool that can do this for you: pwgen. It's probably in your repositories but you can also get it here.

https://sourceforge.net/projects/pwgen/

[dfox → Spivak]

What I meant is that it would be interesting to plug such tool as an final encoding step of some variant of KDF(master, domain)

[dheera → dfox]

We could use entropy from the PBKDF2 output to select English words from the OED.

https://xkcd.com/936/

[andreareina → dheera]

Enter Diceware: http://world.std.com/~reinhold/diceware.html