À priori, pas grand chose, des biais dans la génération ont été découverts :
Tu parles d’une découverte, les deux premiers sont annoncés blanc sur noir dans le manuel de pwgen(1)...
When used from a non-tty passwords are trivially weak by default (first reported by Solar Designer)
"In addition, for backwards compatibility reasons, when stdout is not a tty and secure password generation mode has not been requested, pwgen will generate less secure passwords"
Phonemes mode has heavy bias and is enabled by default (first reported by Solar Designer)
"The pwgen program generates passwords which are designed to be easily memorized by humans, while being as secure as possible. Human-memorable passwords are never going to be as secure as completely completely random passwords."
[^] # Re: Que vaut un mot de passe comme ceux de pwgen ?
Posté par gouttegd . En réponse au journal La proche fin des mots de passe. Évalué à 2.
Tu parles d’une découverte, les deux premiers sont annoncés blanc sur noir dans le manuel de pwgen(1)...
"In addition, for backwards compatibility reasons, when stdout is not a tty and secure password generation mode has not been requested, pwgen will generate less secure passwords"
"The pwgen program generates passwords which are designed to be easily memorized by humans, while being as secure as possible. Human-memorable passwords are never going to be as secure as completely completely random passwords."