Re: portable WoT IDs recoverable with a random password, implemented in pyFreenet

[email protected]
Newsgroups gmane.network.freenet.devel
Organization Freenet Project
Message-ID <5952573.ylrHgjh2Sv@1337h4x0r>
On Thursday, December 22, 2016 12:31:47 AM Arne Babenhauserheide wrote:
> Hi,
> 
> I just finished the basic implementation of a longterm plan I had:
> portable WoT IDs, recoverable with a random password.

Thanks for doing this! :)

I don't have the time to read the whole thread right now, nor am I as 
qualified as Florent to speak about the cryptographic aspects.

But from a usability point of view, instead of a password which contains 
completely random letters, you could consider something like Bitcoin's BIP39:
https://github.com/bitcoin/bips/blob/04875c6d6e6c066377b14f056159a65e2db00254/bip-0039.mediawiki

Basically it uses a set of sufficiently easy and distinct English words to 
encode the key.
So it gives you 12 English words to memorize which can be decoded to your key.
E.g.:
"legal winner thank year wave sausage worth useful legal winner thank yellow".

Given that Bitcoin is implemented in many languages including Python and Java, 
and that BIP39 has been around for a long time, it may be very easy to find 
suitable code to re-use - both in pyFreenet and in the WoT plugin itself, the 
latter of which I may deal with some day after I'm done with the performance 
stuff I'm currently working on.

_______________________________________________
Devl mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
signature.asc (application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=qywE
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.