From 51c470f805c3db4861aaa8a4a801ebda98c71811 Mon Sep 17 00:00:00 2001 From: Rob van Son Date: Tue, 12 Jun 2012 14:07:36 +0200 Subject: [PATCH] Added CreateUser file --- Private/CreateUser.html | 135 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 135 insertions(+) create mode 100644 Private/CreateUser.html diff --git a/Private/CreateUser.html b/Private/CreateUser.html new file mode 100644 index 0000000..bf3a118 --- /dev/null +++ b/Private/CreateUser.html @@ -0,0 +1,135 @@ + + +Create User Account + + + +window.onload = function() { + loadSessionData (CGIscriptorSessionType, CGIscriptorChallengeTicket); + return true; +}; + + + + + + + + + +

Logout

+

Home page

+

Create new user account

+

+

+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + +
Password:
  
 New user account settings
New Username: + +
New Password: +
Repeat Password:
Session type: + + +
  
+ $LOGINUSERNAME /> + $SERVERSALT" /> + $RANDOMSALT" /> + $LOGINTICKET" /> + + +
+
+

+

Strong Passwords: It is so easy

+

+ +

+

+ + + Note: For the procedures used at this site, a basic computer setup can check 1 billion passwords per second. You need + a password (or phrase) strength in the order of 56 bits to be a little secure (one year on a single computer).
+ An example whould be the phrase 'sherlock curry oleander'. + + +

+

+Your password might be vulnerable to brute force guessing. +Protections against such attacks are costly in terms of code complexity, bugs, and execution time.
+However, there is a very simple and secure counter measure. See the XKCD comic +above. The phrase, There is no password like more password would be both much easier to remember, and still stronger than +h4]D%@m:49, at least before this phrase was pasted as an example on the Internet.
+Please be so kind and add the name of your favorit flower, dish, or fictional character to your password. +Say, Oleander, Curry, or Sherlock (each adds 20 bits or more according to Google Ngram viewer) +or even the phrase Sherlock hates curry with oleander (adds ~ 69 bits). +That would be more effective than adding a million rounds of encryption. +

+

+

+

+

+The Salt and Ticket values are all created using SHA256 on 64 Byte of output from /dev/urandom in HEX. +

+ +

Example Login page for CGIscriptor.pl
+ Copyright © 2012 R.J.J.H. van Son
+ This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details.
+ You should have received a copy of the GNU General Public License + along with this program. If not, see http://www.gnu.org/licenses/. +

+

A JavaScript implementation of the SHA family of hashes, as defined in FIPS + PUB 180-2 as well as the corresponding HMAC implementation as defined in + FIPS PUB 198a
+ Version 1.3 Copyright Brian Turek 2008-2010 + Distributed under the BSD License
+ See http://jssha.sourceforge.net/ for more information
+ Several functions taken from Paul Johnson +

+ + + + -- 2.11.4.GIT