You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: readme.md
+12-2Lines changed: 12 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -17,12 +17,15 @@ It generates simple 'stories' of the format `[person1] [action] [person2]'s [obj
17
17
-[Spaced Repetition and Mnemonics Enable Recall of Multiple Strong Passwords](https://arxiv.org/pdf/1410.1490v1.pdf)
18
18
19
19
## Word Lists
20
+
Ideally the generated stories provoke simple and catchy mental images (similar to the lyrics of pop songs). Therefore the word lists must consist of concise and emotionally loaded words.
21
+
Also: the more common the words, the easier they are to picture and memorize.
22
+
20
23
- Persons
21
24
- Lists of persons or fictional characters that are known to most people (in the western world).
- [Top 1500 nouns in english](http://www.talkenglish.com/vocabulary/top-1500-nouns.aspx) because the more common the nouns, the easier they are to memorize.
28
+
- [Top 1500 nouns in english](http://www.talkenglish.com/vocabulary/top-1500-nouns.aspx)
26
29
27
30
## Experiments
28
31
@@ -35,5 +38,12 @@ Informal results of the evaluation of this prototype:
35
38
## Limitations
36
39
This prototype is not secure. It is limited to only 10656188312 different stories which is way too easy to bruteforce. It is equivalent to a password consisting of 7 random lowercase chars in the range of a-z. Further prototypes and experiments with multiple or longer stories are necessary before using this approach in production.
37
40
41
+
### Crucial Enhancements
42
+
- Optimize word lists for 'catchyness'
43
+
- Provoke clear mental images with emotional content.
44
+
- Increase entropy exponentially
45
+
- Increase number of words in the story.
46
+
- Idea: Generate a story consiting of multiple sentences.
47
+
38
48
## Conclusion
39
-
Mnemonics potentially solve the usability problem of passwords. For the average user it becomes easy to memorize randomly generated passwords. Though this prototype lacks entropy and therefore is not secure yet. This issue is probably solvable by a more sophisticated generation of stories.
49
+
Mnemonics potentially solve the usability problem of passwords. For the average user it becomes easy to memorize randomly generated passwords. Though this prototype lacks entropy and therefore it is not secure yet. This issue is probably solvable by a more sophisticated generation of stories.
0 commit comments