This is an old revision of the document!
A generator for random passwords
apg
generates several random passwords. It uses several password generation algorithms (currently two) and a built-in pseudo random number generator.
Default algorithm is pronounceable password generation algorithm designed by Morrie Gasser and described in A Random Word Generator For Pronounceable Passwords National Technical Information Service (NTIS) AD-A-017676. The original paper is very old and had never been put online, so I have to use NIST implementation described in FIPS-181.
Another algorithm is simple random character generation algorithm, but it uses four user-defined symbol sets to produce random password. It means that user can choose type of symbols that should appear in password. Symbol sets are: numeric symbol set (0, …, 9) , capital letters symbol set (A, …, Z) , small letters symbol set (a, …, z) and special symbols symbol set (#, @, !, …).
Built-in pseudo random number generator is an implementation of algorithm described in Appendix C of ANSI X9.17 or RFC1750 with exception that it uses CAST or SHA-1 instead of Triple DES. It uses local time with precision of microseconds (see gettimeofday(2)) and /dev/random (if available) to produce initial random seed.
apg
also have the ability to check generated password quality using dictionary. You can use this ability if you specify command-line options -r dictfile or -b filtername where dictfile is the dictionary file name and filtername is the name of Bloom filter file. In that dictionary you may place words (one per line) that should not appear as generated passwords. For example: user names, common words, etc. You even can use one of the dictionaries that come with dictionary password crackers. Bloom filter file should be created with apgbfm
utility included in apg distribution. In future releases I plan to implement some other techniques to check passwords (like pattern check) just to make life easier.
http://www.adel.nursat.kz/apg/ (currently offline)
/usr/share/doc/apg/APG_TIPS
None
File or Directory | Description |
---|---|
/etc/apg.conf | System-wide apg configuration for all users on the system. |
Manual pages:
user@host:~$ man apg
For the bloom filter program:
user@host:~$ man apgbfm
To install apg on Debian:
root@host:~$ apt-get update root@host:~$ apt-get -y install apg
None
None