Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update entropy validator #655

Open
babenek opened this issue Jan 13, 2025 · 0 comments
Open

Update entropy validator #655

babenek opened this issue Jan 13, 2025 · 0 comments
Labels
question Further information is requested

Comments

@babenek
Copy link
Contributor

babenek commented Jan 13, 2025

as is:

"entropy_validation": {
    "iterator": "BASE64STDPAD_CHARS",
    "entropy": 5.497849750697005,
    "valid": true
}

to be:

"entropy_validation": {
    "entropy": 5.703055,
    "charset": ["BASE64STDPAD_CHARS", BASE32STDPAD_CHARS , ansi ...]
}

reason:
Current entropy is calculated with an iterator. It is quickly, but weak for analysis.
e.g.
eyJsldj.sd5nkv - a JWT but . is not a symbol of BASE64
eyJsldjsd5nkv - the same entropy and all symbols are from BASE64

easiest to be:

"entropy": 5.703055,
@babenek babenek added the question Further information is requested label Jan 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

1 participant