Hi!

I want to present here program SimPaGen which is a simple in use, small and very flexible application for password creation. Written with FASM utility makes easier generation of safe passwords used for logging on various forums, e-mail accounts and other sites.

Simple animation presenting program SimPaGen execution:



Created passwords consist of characters belonging to any combination of these four predefined categories:

• letters A, ..., Z,
  
• letters a, ..., z,
  
• digits 0, ..., 9,
  
• underscore symbol '_'
  

and the user-defined character set. Number of all possible non-empty character sets is equal to 2^224-1 (number of all non-empty subsets of the set containing symbols with hexadecimal codes from 0x20 to 0xFF). Maximal length of the generated password is equal to 9999 characters. Created password is copied into the clipboard by pushing the button



Special hotkey WIN + F12 defined by application, generates a new password and copies it into the clipboard (also if the application window is not active).

Program settings such as length of the created passwords and password character set are saved in the registry key

HKEY_CURRENT_USER\Software\SimPaGen\<program_version>

when the application ends.

Application uses CryptoAPI functions from 'advapi32.dll' library in order to gain "cryptographically random" sequence of the password characters.

Source file of the application contains embedded data of the manifest and the program icons.

Program is an example of the edit fields subclassing method.

Here you can download application with source file encoded in UTF-8.

Project's homepage: http://mikhajduk.houa.org/EN/SimPaGen.php

Because program was described in 3 language versions here you have also:

• Russian language version,
  
• Polish language version.

Program tested under Windows XP SP3.

How about adding a button "copy to clipboard". Saves the user having to select and press ctrl-C.

I'll think about it.

BTW, here's the character set I've been using to generate the startup (one-time use) passwords in one of my projects:

346789bcdfghjkmnprstwxzBCDFGHJKLMNPRTWX

It was composed with two things in mind: first, it should not contain characters that could be easily confused with each other in some fonts (like l and 1 or O and 0); and second, that it should not generate any meaningful words (especially the curse words, etc.) - which I achieved by not including the vowels.

All of the uppercase/lowercase letters look the same when using a smallcaps style

thanks, cool program

What about adding a format for password?

For '111*' - will generate password with first '111'.
For 'vitya_*_85' - will generate passwords wich begins with 'vitya_' and ends with '_85'

Indeed, using formats or even regular expressions for password generation is an interesting idea. I'll try to add this feature to the next version of this application. Thanks for inspiring comment, dead_body.

I will post your program at wasm.ru in sources?
Links to your site will be added, of course.

Thanks! I'm glad that this utility is appreciated on wasm.ru, excellent site full of good articles, utilities and educational applications, with great and creative community.

Nice program MHajduk!
I'm missing something, i see no idata section using the include directive to import libraries. I saw that before, can you explain a bit?

Thanks, thimis.

I simply used some features of extended header 'win32wx.inc' which give possibility to "forget" about manually written import section. It's very convenient. You just need to put the line '.end <label_name>' (where '<label_name>' is the entry point of your program) at the end of the code and the import section will be added automatically.

very convenient indeed, nice tip MHajduk

New version of SimPaGen application available.

Additions and changes:

[+] added button which copies password from the application edit field to the clipboard,

[+] added hotkey WIN + F12 which generates new password and copies it to the clipboard (hotkey works also if application window is not active),

[+] added possibility of saving actual program settings (password length and password character set) in the Windows registry,

[x] simplified and corrected operations on the array which defines characteristic function of the password character set.

For the download links see the first post of this thread.

See a small error in display:

What version of the Windows system do you use, bitRAKE? I wrote this program under Windows XP SP3 Home Edition.

Even in the classic style of the Windows display I can see this:



I would expect more elaborate report about circumstances of this strange behavior (if it was real).

have no problems here - was clicking everything but no similar bug reproducing

Currently I'm using Windows 2003 Server x64 SP1. I have not fabricated anything. When I first run the program there is nothing where "A-Z" should be - the checkbox is present and functional, but no text. Using the checkbox produces the picture shown. (Just downloaded it again to be certain - same error. Might be related to DEP as moving the strings to the data section fixes the error. At this time I have no idea why these two strings ("A-Z" and "Other:") do not work while the rest are fine.)

I'll try it on WinXP and report again.

To pass quoted text strings as a procedure parameters I use macros included with the extended header 'win32wx.inc'.

Probably for 64-bit system (as yours) should be used header file 'win64w.inc'?

Maybe it will fix this problem (32-bit data alignment in 64-bit system???) for 64-bit Windows (I have 32-bit).

Very good - alignment makes sense. Only those two strings start at an odd address - wide strings need to be word aligned at minimum.

Adding three lines to WIN32WX.INC (line 109): ...also fixes the error. This should work for all encodings of CALL (except 64-bit far call - not likely to be used in Windows). Maybe should be used at line 73 as well.