Ron LaPedis wrote:
I may have found a bug in 10.5.5 password assistant. When I select FIPS-181 in Password Assistant, it consistently generates all lower case passwords. The spec is a mix of upper, lower, numeric, and punctuation. Is anyone else seeing this behavior?
The specs are here:
http://www.itl.nist.gov/fipspubs/fip181.htm
I find no mention of case.
Where did you see your spec about mix of case?
There are some "improved" versions that also randomize the case.
Evermap says:
"Pronouncable <sic> case-sensitive passwords
This method uses FIPS-181 algorithm but also randomizes case of individual characters. These passwords are harder to remember than FIPS-181 and provide low-to-medium security protection. Examples: OaHidleINY, UKtroLziiCa, OaCdIsGeJ...."
Which says to me that the FIPS-181 does not produce upper and lower case.
In fact, one of the FIPS-181 features is inter-system interoperability, which would not happen if case were part of the password.
I hope Eversoft's software is better than their spelling. (Pronouncable, indeed) 🙂
http://www.evermap.com/automasssecure.asp
