Aug 13, 2017 Bug-fix Release
This release is primarily a bug-fix release. It fixes the following 2 big bugs:
- When hyphenating passwords, the character count was not accurately reflected. That was fixed in the last release, but when changing word lists while hyphenated, the character count was based on the password without the hyphens, making it worse. The character count is not accurately reflected based on whether or not the password is hyphenated.
- Emojis can be multiple bytes, and the
.length
Javascript function is counting bytes, meaning an 8-glyph emoji could get counted as anywhere from 8 to 24 characters, depending on the number of bytes per character. So, rather than counting the length after the password was generated, the length is determined from the entropy, seeing as though that is what is used to get the length anyway.
In addition, the Chinese Diceware word lists where taken down from 2 lists to 1 using the pinyin word list, and dropping the wubi list. This is after some back-and-forth on Twitter and Slack, and ultimately determined that using the pinyin word list was the better way to go.
Every release should bump up the number words in the Trump word list, so this release brings that word list size up to 5,186 unique words, or about 12.34-bits of entropy per word.