I’ve released today the new version of spass, a tool that creates cryptographically strong passwords and passphrases by generating random bits from your sound card.
On the user-facing side, spass can now create passphrases as well as passwords. The words for the passphrases are chosen from a list of 8192 words, which means each word adds 13 bits of entropy to the passphrase.
spass can now use one of three audio backends (the old version could only use OSS):
- Advanced Linux Sound Architecture (ALSA)
- Open Sound System (OSS)
- PortAudio
PortAudio support will hopefully make it easy to port spass to other platforms as well (such as Windows). The random number generator got an overhaul, and now there is an unbiasing step before applying the hash function. This should help produce consistent results in terms of entropy. Behind the scenes, I’ve migrated the project from autotools to cmake.
You can find more information, as well as both source and binary packages, at https://github.com/guyru/spass.