You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using v1.9.0 of this library, time to crack calculations are wrong, sometimes giving 0 months/years.
Issue is not present in v1.8.2 & earlier.
For now I've found mainly 2 passwords that are able to reproduce this issue: jdfhasfqwui1 & hsdsjlll, but there's definitely more (check Some more passwords at the end).
Here's a sample code with results:
Sample code
importcom.nulabinc.zxcvbn.Zxcvbnfunmain() {
val zxcvbn =Zxcvbn()
val strength = zxcvbn.measure("jdfhasfqwui1")
val crackTimesDisplay = strength.crackTimesDisplay
println("10B/sec (offline fast): ${crackTimesDisplay.offlineFastHashing1e10PerSecond}")
println("10K/sec (offline slow): ${crackTimesDisplay.offlineSlowHashing1e4perSecond}")
println("10/sec (online fast): ${crackTimesDisplay.onlineNoThrottling10perSecond}")
println("100/hour (online slow): ${crackTimesDisplay.onlineThrottling100perHour}")
}
Results
Password
v1.9.0
v1.8.2
jdfhasfqwui1
hsdsjlll
Some more passwords
Modify jdfhasfqwui1 a bit to get:
jdfhasfewui5
fdfhadfewui7
ydfhcxfewup9
1lmhcxf5wuo9
All of the above give the same 10K/sec (offline slow): 0 years as jdfhasfqwui1 with v1.9.0
Similarly modify hsdsjlll a bit to get:
ut3sljjj
abc9ppp
jr9rg555
down3tlkkk
down3tlkkk gives 10/sec (online fast): 0 months with v1.9.0.
The rest of them gives the same 100/hour (online slow): 0 years as hsdsjlll with v1.9.0
The text was updated successfully, but these errors were encountered:
When using
v1.9.0
of this library, time to crack calculations are wrong, sometimes giving0 months/years
.Issue is not present in
v1.8.2
& earlier.For now I've found mainly 2 passwords that are able to reproduce this issue:
jdfhasfqwui1
&hsdsjlll
, but there's definitely more (checkSome more passwords
at the end).Here's a sample code with results:
Sample code
Results
Some more passwords
jdfhasfqwui1
a bit to get:jdfhasfewui5
fdfhadfewui7
ydfhcxfewup9
1lmhcxf5wuo9
All of the above give the same
10K/sec (offline slow): 0 years
asjdfhasfqwui1
withv1.9.0
hsdsjlll
a bit to get:ut3sljjj
abc9ppp
jr9rg555
down3tlkkk
down3tlkkk
gives10/sec (online fast): 0 months
withv1.9.0
.The rest of them gives the same
100/hour (online slow): 0 years
ashsdsjlll
withv1.9.0
The text was updated successfully, but these errors were encountered: