From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: D Newsgroups: gmane.emacs.devel Subject: Re: [NonGNU ELPA] New package: dw.el Date: Wed, 31 Mar 2021 18:24:32 +0200 Message-ID: <5f5c2f50-d831-4ba2-602c-4fe981cbefbb@posteo.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="27012"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.8.0 Cc: emacs-devel@gnu.org To: bugs@gnu.support Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Wed Mar 31 18:25:56 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lRdfH-0006vP-3q for ged-emacs-devel@m.gmane-mx.org; Wed, 31 Mar 2021 18:25:55 +0200 Original-Received: from localhost ([::1]:38200 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lRdfG-0005LL-4Y for ged-emacs-devel@m.gmane-mx.org; Wed, 31 Mar 2021 12:25:54 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:44424) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lRde3-00047t-9T for emacs-devel@gnu.org; Wed, 31 Mar 2021 12:24:39 -0400 Original-Received: from mout02.posteo.de ([185.67.36.66]:43563) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lRde0-0006oj-2b for emacs-devel@gnu.org; Wed, 31 Mar 2021 12:24:38 -0400 Original-Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id 9D83D2400FD for ; Wed, 31 Mar 2021 18:24:33 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1617207873; bh=i2YCamchwj+N1+HMm27hKSSRjcUCDyfo11ee2ISAmIM=; h=Subject:To:From:Cc:Date:From; b=gkkW++bN99T7sUq38gDiAqF7mt23Ri4Z+m+kiz65uXMELmnaMJZwZ2kQXGNkyib67 zHL/yzQHbhIvhxNX7c751NO2RHuRRwHP+KpgqfPIP+HuSx5/dnSXrfosLeUC8fjnCa QG0vfQHWhK3A3A8tNjMa2lRbYwRY69+HyqqxU2s5V7Iytigwwawq3Y6qYLOfI4hP9Y IhgGTjS/0iW8gwgW2T9WwTbJmaMTmJzOEEsloEHA67cX/7MTBXMJ4buaDmuW/Mst+I 83pCrG9vzLL4zM6p2oaVjloRNJWKRmz0OP0KF/Vc3DLwGKyUMDYRBRu6G7ilpkNCrt RhO9LxobhUf1w== Original-Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4F9WqP0psjz9rxG; Wed, 31 Mar 2021 18:24:32 +0200 (CEST) In-Reply-To: Content-Language: en-US Received-SPF: pass client-ip=185.67.36.66; envelope-from=d.williams@posteo.net; helo=mout02.posteo.de X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:267222 Archived-At: > User is supposed to have the list, that does not seem practical. It > means package is not self contained and user has to download something > from somewhere. You need a diceware world list for the diceware method, yes. That's why I added the appropriate links to the package description. > Why don't you generate those numbers on the fly by taking random lines > from a supplied word list? That is of course possible, in principle. On the other hand it's generally not a good idea to use a dictionary list for this. The reasons for that are twofold: one only the first 6^5 words are used. Using more would require using more than 5 dice per word. In a dictionary file like words, this would essentially guarantee that all words start with [Aa]. On top of that, dictionary files contain incredibly many variations of the same word with minor spelling and casing differences, which of course also negatively affects entropy. Hence it's good to stick to word lists deliberately generated for diceware passphrase generation. I could mitigate this problem by providing a word list the default value. This would not even require an extra file as the word list is internalized as an association list. That way people who want to try out diceware for the first time don't have to bother with external resources and people who just want to try it out get a plug & play experience.