Repository navigation
PIN complexity enforcement support #89
Description
Area
Other
The problem
Check PIN complexity on PIN set. If PIN is too short, easy to guess, or common, the user should acknowledge the risks on a separate confirmation screen.
Proposed shape
Pseudocode:
score = length(pin)
if all_digits_same(pin):
score -= 5
if sequential(pin):
score -= 4
if repeating_pattern(pin):
score -= 3
if unique_digits(pin) <= 2:
score -= 2
if pin in common_pin_blacklist:
score -= 5
if score >= 4:
ACCEPT
else:
REJECTAlternatives considered
No response
Activity
fix(fido): the strong-pin rule refused two shapes and let three through