@@ -7,7 +7,9 @@ Chroma-Hash Password entry can be frustrating, especially with long or difficult passwords. On a webpage, secure fields obscure your input with •'s, so others can't read it. Unfortunately, neither can you—you can't tell if you got your password right until you click "Log In". -Chroma-Hash displays a series of colored bars at the end of field inputs so you can instantly see if your password is right. Chroma-Hash takes an MD5 hash of your input and uses that to compute the colors in the visualization. The MD5 hash is non-reversible, so no one could know what your password just from the colors. Your password will display the same sequence each time, so you can learn to expect "blue, red, pink", for instance; if you instead see "green, purple, yellow", you'll know you typed it wrong. +Chroma-Hash displays a series of colored bars at the end of field inputs so you can instantly see if your password is right. Chroma-Hash takes an MD5 hash of your input and uses that to compute the colors in the visualization. The resulting color pattern is non-reversible, so no one could know what your password just from the colors. + +For a more detailed description of Chroma-Hash, be sure to [check out this blog post about it.](http://mattt.me/2009/11/chroma-hash-revisited/). ## Demo @@ -25,6 +27,7 @@ Try it out at: <tt>[http://mattt.github.com/Chroma-Hash/](http://mattt.github.co - <tt>minimum</tt> minimum number of characters needed for grayscale bars to be displayed in color ## Requirements + - jQuery 1.3+ ## License @@ -53,11 +56,14 @@ Chroma-Hash is licensed under the MIT License: ## Credit + +Inspired by Arc90 Lab's HashMask, by Chris Dary +[http://lab.arc90.com/2009/07/hashmask.php](http://lab.arc90.com/2009/07/09/hashmask-another-more-secure-experiment-in-password-masking/) + Chroma-Hash uses Paul Johnston's Javascript MD5 implementation, and is distributed under the BSD License See [http://pajhome.org.uk/crypt/md5](http://pajhome.org.uk/crypt/md5) for more info Includes jQuery Color Animations plugin, Copyright 2007 John Resig Released under the MIT and GPL licenses See [http://plugins.jquery.com/project/color](http://plugins.jquery.com/project/color) for jQuery project page -Inspired by Arc90 Labs' HashMask -[http://lab.arc90.com/2009/07/hashmask.php](http://lab.arc90.com/2009/07/hashmask.php) \ No newline at end of file +Thanks to [Ian Young](http://www.iangreenleaf.com/) for his [suggestion to represent color components in 4-bits](http://blog.iangreenleaf.com/2009/08/making-chroma-hash-less-leaky.html) to increase overall security. README.markdown @@ -4,6 +4,9 @@ * * Copyright (c) 2009 Mattt Thompson * Licensed under the MIT licenses. + * + * Inspired by HashMask by Chris Dary + * http://lab.arc90.com/2009/07/09/hashmask-another-more-secure-experiment-in-password-masking/ */ (function($){ chroma-hash.js 180abaa2875b8d7f65adb3dab107c8786c45deac Mattt Thompson m@mattt.me http://github.com/mattt/Chroma-Hash/commit/ffa2df29b497047289fe243785172bbbf9e174c6 ffa2df29b497047289fe243785172bbbf9e174c6 2009-11-07T03:45:26-08:00 2009-11-07T03:45:26-08:00 More specific credit, where credit is due. 2c7fc3528d6e1165b39a71d738fd1fd8cf7140a2 Mattt Thompson m@mattt.me