Re: [Cfrg] Word-lists for Diffie-Hellman and Fingerprints

Gunnar Wolf <gwolf@gwolf.org> Mon, 28 August 2017 22:49 UTC

Return-Path: <gwolf@gwolf.org>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77EEC13213D for <cfrg@ietfa.amsl.com>; Mon, 28 Aug 2017 15:49:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Fb7AizVjugS for <cfrg@ietfa.amsl.com>; Mon, 28 Aug 2017 15:48:59 -0700 (PDT)
Received: from mail.iiec.unam.mx (mail.iiec.unam.mx [132.248.241.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CAF21321C9 for <cfrg@irtf.org>; Mon, 28 Aug 2017 15:48:58 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.iiec.unam.mx (Postfix) with ESMTP id 22422177651; Mon, 28 Aug 2017 17:48:57 -0500 (CDT)
Received: from mail.iiec.unam.mx ([127.0.0.1]) by localhost (mail.local.iiec [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QtP_NXMHzYUh; Mon, 28 Aug 2017 17:48:56 -0500 (CDT)
Received: from v.gwolf.org (unknown [132.248.72.123]) by mail.iiec.unam.mx (Postfix) with ESMTP id C5ED5177404; Mon, 28 Aug 2017 17:48:55 -0500 (CDT)
Received: by v.gwolf.org (Postfix, from userid 1000) id 641B028A9A; Mon, 28 Aug 2017 17:48:55 -0500 (CDT)
Date: Mon, 28 Aug 2017 17:48:55 -0500
From: Gunnar Wolf <gwolf@gwolf.org>
To: Bill Cox <waywardgeek@gmail.com>
Cc: Derek Atkins <derek@ihtfp.com>, prz@acm.org, Moxie Marlinspike <moxie@thoughtcrime.org>, IRTF CFRG <cfrg@irtf.org>, Werner Koch <wk@gnupg.org>
Message-ID: <20170828224854.7jf6rywiwzyf5vqp@gwolf.org>
References: <23B4CF16-6E26-4674-B128-DCB3FCC5A97F@azet.org> <sjmbmn3zqb6.fsf@securerf.ihtfp.org> <CAOLP8p6QsDPBBJy5RRMjLXVtW4c8DewoMnUpxpO3v5CwFjWEyg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAOLP8p6QsDPBBJy5RRMjLXVtW4c8DewoMnUpxpO3v5CwFjWEyg@mail.gmail.com>
User-Agent: NeoMutt/20170113 (1.7.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/lPMeww_oRaaRal1zgycTW2pI4Qc>
Subject: Re: [Cfrg] Word-lists for Diffie-Hellman and Fingerprints
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Aug 2017 22:49:01 -0000

Bill Cox dijo [Fri, Aug 25, 2017 at 11:13:38AM -0700]:
> Here's a 1024-long word list for English that I cooked up with a few hours
> of work.  In short, the process for any language is:
> (...)
> It has uses in password reset flows where a support person is trying to
> help an employee who is at a loud airport using a cell phone.
> 
> The list could certainly be improved, but it is a good starting point for
> English.

...Of course, a sensible workflow whenever possible is just to stay
away from English for any uses that need to be the least bit phonetic.