aboutsummaryrefslogtreecommitdiffstats
path: root/makepass.bash
blob: 16dffa91736559af22a0f3c64f82966746915583 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
#!/usr/bin/env bash
# Filename:      makepass.bash
# Purpose:       Creating random passwords.
# Authors:       Dennis Eriksen <d@ennis.no>
# Bug-Reports:   Email <git@dnns.no>
# License:       This file is licensed under the BSD 3-Clause license.
################################################################################
# This script generates random passwords.
################################################################################
# Copyright (c) 2018-2023 Dennis Eriksen • d@ennis.no

MAX=255         # max length of passwords
RANGE_MAX=42    # max length when using random length
RANGE_MIN=8     # min length when using random length
PASS_WORDS=8    # number of words in passphrases

LOWER='abcdefghijklmnopqrstuvwxyz'
UPPER='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
DIGIT='0123456789'
OTHER='!#$%&/()=?+-_,.;:<>[]{}|@*'
ALPHA=${LOWER}${UPPER}
ALNUM=${ALPHA}${DIGIT}
EVERY=${ALNUM}${OTHER}

LENGTH=${MAKEPASS_LENGTH:-0}     # length of passwords. 0 means "random number between RANGE_MIN and RANGE_MAX"
NUMBER=${MAKEPASS_NUMBER:-10}    # number of passwords
PRINTLEN=${MAKEPASS_PRINTLEN:-0} # print length of passwords
NORMAL=${MAKEPASS_NORMAL:-$ALNUM'-_'}
SPECIAL=${MAKEPASS_SPECIAL:-$EVERY}
WORDLIST=${MAKEPASS_WORDLIST:-/usr/share/dict/words}
XWIDTH=$(tput cols)
WORDS=()

#
# Functions
#

# makepass-function
function main {

  # Getopts
  while getopts 'hl:n:p' opt; do
    case $opt in
      h)
        help && return 0;;
      l)
        if ! int_in_range "$OPTARG" 0 "$MAX"; then die "-l takes a number between 0 and $MAX"; fi
        LENGTH=$OPTARG;;
      n)
        if ! int_in_range "$OPTARG" 1 "$MAX"; then die "-n takes a number between 1 and $MAX"; fi
        NUMBER=$OPTARG;;
      p)
        PRINTLEN=1;;
      *)
        die "Unknown argument";;
    esac
  done
  shift $((OPTIND - 1))


  #
  # Some error-checking
  #

  if [[ $# -gt 1 ]]; then die "only one argument"; fi

  if [[ -n $1 ]]; then LENGTH=$1; fi

  # Check $LENGTH and $NUMBER
  if ! int_in_range "$LENGTH" 0 "$MAX"; then die "length must be a number between 0 and $MAX"; fi
  if ! int_in_range "$NUMBER" 0 "$MAX"; then die "number-argument must be between and $MAX"; fi


  #
  # Some other work
  #

  if (( PRINTLEN )); then PRINTLEN=$((LENGTH < 100 ? 2 : 3)); fi

  COL_WIDTH=$(( ( LENGTH ? LENGTH : RANGE_MAX ) + 2 ))
  COL_NUM=$(( XWIDTH / ( COL_WIDTH + ( PRINTLEN ? PRINTLEN + 1 : 0 )) ))



  #
  # Print!
  #

  print_columns "Normal passwords" "$NUMBER" "$NORMAL"

  echo ""

  print_columns "Passwords with special characters" "$((NUMBER*2/3))" "$SPECIAL"

  if [ -r "${MAKEPASS_WORDLIST}" ]; then
    echo ""
    echo "Passphrases:"

    mapfile -t WORDS < "${WORDLIST}"

    for ((i=0; i < (NUMBER / 2); i++)); do
      passphrase
    done;
  fi


}

# Function to print passwords in neat columns
function print_columns {
  local title=$1
  local num=$2
  local chars=$3
  local i

  local strings=()
  for ((i=0; i < num; i++)); do
    strings+=("$(randstring "$chars")")
  done

  echo "${title}:"

  i=0
  for s in "${strings[@]}"; do
    ((i++))
    if (( PRINTLEN )); then printf "%0${PRINTLEN}i " "${#s}"; fi
    printf "%-${COL_WIDTH}s" "$s"
    if ((i % COL_NUM == 0 || (i == num && i % COL_NUM > 0) )); then echo ""; fi
  done
}

# Function to create random strings
function randstring {
  local chars=${1:-$NORMAL}
  local string
  local len=$(( LENGTH ? LENGTH : RANDOM % (RANGE_MAX - RANGE_MIN + 1) + RANGE_MIN ))

  string+="${ALPHA:$((RANDOM % ${#ALPHA})):1}"
  while (( ${#string} <= len - 2 )); do string+="${chars:$((RANDOM % ${#chars})):1}"; done
  if (( len >= 2 )); then string+="${ALNUM:$((RANDOM % ${#ALNUM})):1}"; fi

  echo "$string"
}

# PASSPHRASE!!
function passphrase {
  local string
  local i
  for ((i=0; i < PASS_WORDS; i++)); do
    string+="${WORDS[$((RANDOM % ${#WORDS[@]}))]}-"
  done
  string="${string:0:-1}"

  echo "$string"
}

# Check if int and if in range
function int_in_range {
  local num=$1
  local min=$2
  local max=$3

  if [[ $num =~ ^[0-9]+$ && $min -le $num && $num -le $max ]]; then
    return 0
  fi
  return 1
}

# Function to die
function die() {
  echo -- "$@"
  echo -- "Maybe try running \`makepass -h\` for help"
  exit 1
}

# Help-function
function help {
  echo $'NAME
    makepass - create several random passwords

SYNOPSIS
    makepass [OPTIONS] [NUM]

    If a NUM is provided, passwords will be NUM characters long.

    By default `makepass` will output passwords from the three following classes:

    - Normal passwords - random strings with letters (both lower and upper
      case), numbers, and dashes and underscores.

    - Passwords with special characters - random strings generated from lower
      and upper case letters, numbers, and the following characters:
      !#$%&/()=?+-_,.;:<>[]{}|@*

    - Passphrases - if we find a dictionary, a series of eight random words
      from the dictionary, separated by dashes. The number of words can not be
      changed, but you do not have to use all of them. Use as mane as you want.

    The first character will always be alphabetic, and the last will always be
    alphanumeric.

DESCRIPTION
    makepass has the following options:

    -h
        output this help-text
    -l
        length of passwords. See MAKEPASS_LENGTH below
    -n
        number of passwords. See MAKEPASS_NUMBER below
    -p
        print length of number

ENVIRONMENT
    makepass examines the following environmental variables.

    MAKEPASS_LENGTH
        Specifies the length of passwords. Valid values are 0-255. If 0, a
        random value between 8 and 42 will be used for each password. -l
        overrides this environmental variable, and the argument NUM overrides
        that again. So `MAKEPASS_LENGTH=10 makepass -l 12 14` will give
        passwords that are 14 characters long, even though both -l and
        MAKEPASS_LENGTH also specifies a length.

    MAKEPASS_NUMBER
        The number of passwords to generate. This formula is used to determine
        how many passwords from each group should be generated:
        - (n) normal passwords
        - (n / 3 * 2 + 1) special passwords
        - (n / 2) passphrases
        Where n is 10 by default. Valid values for n are 1-255. Floating-poing
        math is not used, so results may vary.

    MAKEPASS_PRINTLEN
        If 1, print length of all passwords. If 0, don\'t.

    MAKEPASS_NORMAL
        String of characters from which to generate "normal" passwords.
        Defaults to:
        abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_

    MAKEPASS_SPECIAL
        String of characters from which to generate passwords with special
        characters. Defaults to the same characters as in MAKEPASS_NORMAL, plus
        these:
        !#$%&/()=?+-_,.;:<>[]{}|@*

    MAKEPASS_WORDLIST
        Specifies the dictionary we find words for passphrases in. If this is
        unset or empty, we try "/usr/share/dict/words". If that file does not
        exist, no passphrases will be provided.

NOTES
    This scripts makes use of $RANDOM - a builtin in bash which produces a
    pseudo-random integer, newly generated each time the parameter is
    referenced. This should provide enough randomnes to generate sufficiently
    secure passwords.

AUTHOR
    Dennis Eriksen <https://dnns.no>'

  return 0
}

# RUN IT!
main "${@:-}"

## END OF FILE #################################################################