1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859 |
- Name: C++ port of zxcvbn, an advanced password strength estimation library.
- Short Name: zxcvbn-cpp
- URL: https://github.com/rianhunter/zxcvbn-cpp
- Version: 0
- Date: Dec 4, 2016
- Revision: cf092c952cd2325ce390b2691231a8f1cb195d59
- License: MIT
- License File: LICENSE.txt
- Security Critical: yes
- Description:
- A realistic password strength estimator. https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/
- Used in the Password Manager to inform users about weak passwords.
- Local Modifications:
- Applied the following patches:
- - patches/compilation.diff: To fix compilation under clang with -Werror and
- -DUNICODE.
- - patches/adjacency_graphs.diff: Removes static initializers in
- adjacency_graphs.hpp and adjacency_graphs.cpp and greatly reduces binary size
- impact by replacing optional std::strings with base::StringPiece.
- - patches/no_static_initializers.diff: Removes static initializers elsewhere by
- either inlining the expression, or making use of static base::NoDestructors.
- - patches/dictionary_component.diff: Adds a ParseRankedDictionary API to
- frequency_lists.hpp to support providing the dictionaries via component
- updater and adds an option to build_frequency_lists.py to output the processed
- text files. Furthermore, removes the need to auto generate
- _frequency_lists.hpp and _frequency_lists.cpp
- - patches/base_utf8.diff: Replaced string utilities from utils.cpp with //base's
- UTF8 API.
- - patches/fix_overflow.diff: Fixes a bug inside scoring.cpp triggered when the
- number of computed guesses exceeds DBL_MAX.
- - patches/flat_map_ranked.diff: Use base::flat_map instead of std::unordered_map
- for ranked dictionaries to reduce memory foot print.
- - patches/utf8_support.diff: Switched the regex engine in matching.cpp from
- std::regex to ICU's regex, so that repeat matches work with multi-byte code
- points. Also guarded an assert in scoring.cpp that was hit for non-ASCII
- passwords.
- - Dropped the data dictionary from the check-out, as the data will now be
- provided via component updater. The used dictionaries can be found at
- https://github.com/rianhunter/zxcvbn-cpp/tree/cf092c952cd2325ce390b2691231a8f1cb195d59/data
- - Removed the demo/ folder and zxcvbnn_post.js from the checkout. They only
- contained JavaScript that is irrevelant for the intended usage in Chromium.
- - Removed Python sources, unneeded config files, JavaScript bindings, C wrapper
- and incomplete C++ entrypoints from native-src, since they are unused / not
- necessary for Chromium, includes applying patches/no-c-api.diff.
- - patches/reduce_memory_usage.diff: Reduce browser memory usage by ~2.0 MiB on
- 64bit, ~0.65 MiB on 32bit (https://crrev.com/c/2842124).
- Ran the following commands to generate adjacency graphs:
- $ python ./data-scripts/build_keyboard_adjacency_graphs.py ./native-src/zxcvbn/adjacency_graphs.hpp
- $ python ./data-scripts/build_keyboard_adjacency_graphs.py ./native-src/zxcvbn/adjacency_graphs.cpp
- Ported test/test-matching.coffee and test/test-scoring.coffee to C++ unitests
- (test/matching_unittest.cc and test/scoring_unittest.cc).
- Added fuzzers for matching and scoring (test/matching_fuzzer.cc and
- test/scoring_fuzzer.cc).
|