libpathwell | PAM module and library for auditing/enforcing Password

libpathwell is a C library. libpathwell has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

$id: readme,v 1.6 2017/04/12 18:21:45 klm exp $. pathwell (password topology histogram wear-leveling) is a new approach to measuring and enforcing password complexity, focusing on the uniqueness of each user password's topology. a password's "topology" is its "shape", such as "uppercase letter, followed by several lowercase letters, several numbers, and then a special character". when many users are required to create passwords fitting some conventional strength rules (such as minimum length, minimum number of character sets), they tend to gravitate towards common topologies. password cracking tools incorporate this (called "masks" in hashcat, for example). a set of password hashes with a slow (difficult) cipher, or a set of very long (14-character or more) passwords may be infeasible to blindly crack, but by focusing on only 1-5 most popular topologies, an attacker might crack 5-10% or more of an enterprise's user passwords in hours or days instead