Jasmin Password Generator as a Service

RESTful service that exposes a verified password generator (coded in Jasmin and proved in Easycrypt).

To read the instructions for setting up the service, click here

To use the Bitwarden Generator script

1. Run the command npm install -g @bitwarden/cli

2. Run the command ./generate_bw_passwords.py <number_of_passwords_you_want> <the_file_you_want_to_output_to>

Example: ./generate_bw_passwords.py 10 10passwordsbw.txt will generate 10 passwords to the file 10passwordsbw.txt

You can define what character classes you want to include by using these arguments combined:

-u (include uppercase) -l (include lowercase) -n (include numbers) -s (include special characters)

If you want to generate a password with only letters, both upper and lowercase, use -ul. If you want to use only symbols, use -s. If you want every character class, use -ulns.

The default is -uln.

NOTE: This script may take a while. For 100 passwords, it takes about 1 minute. For 1000 passwords, it takes about 10 minutes.

---

To use the Jasmin Generator script

Run the command ./generate_jasmin_passwords.py <number_of_passwords_you_want> <password_policy> <the_file_you_want_to_output_to>

The policy has this structure:

• length
• minimumLowercase
• maximumLowercase
• minimumUppercase
• maximumUppercase
• minimumNumbers
• maximumNumbers
• minimumSpecial
• maximumSpecial

Example: ./generate_jasmin_passwords.py 10 14 1 14 1 14 1 14 1 14 10passwordsbw.txt will generate 10 passwords to the file 10passwordsbw.txt that comply with the policy minlength: 10; required: upper; required: lower; required: digit; required: special;

---

To use the Policy Compliance Check script

Run the command ./policy_compliance_check.py <path_to_the_folder_with_test_data> <the_policy_to_check_against> --minclasses <value> --blocklist

Example: ./policy_compliance_check.py test_data/jasmin_default 14 1 14 1 14 1 14 1 14 will check the folder ./test_data/jasmin_default against the policy minlength: 10; required: upper; required: lower; required: digit; required: special;.

The --minclasses argument is optional. Only integers between 1 and 4 are valid values. Usage: --minclasses 3. The --blocklist argument is optional. It allows the compliance checker to verify the password against a default list of the 100 000 most used passwords. This list is also used in our npm package

NOTE:

• The path is to the folder that contains the test data, and not the data file itself.
• The minlength attribute in these examples is always fulfilled, since 14, the length of the generated passwords, is always greater than minlength = 10
• This Compliance Check Script was developed for Jasmin Generated Passwords. It is possible that this tool is not accurate for Bitwarden's Smartpasswords, because some policies are not describable in this format, e.g., this policy:

minlength: 10; required: [a](1, 4); allowed: upper, digit; minclasses:2; blocklist:default;

It's impossible to describe it accurately, because we can only use restrictions for lowercase and not characters themselves. The rough translation for this policy would be 10 1 4 0 10 0 10 0 0. But this allows for a password to contain any lowercase letter.