Qué es: librería y CLI que captura video y audio en tiempo real, mezcla esa entropía con el CSPRNG del sistema (HKDF) y genera contraseñas seguras.
No es determinista por diseño (tipo LavaRand). Puedes activar una sal determinista solo para pruebas.
Instalación
Desde PyPI:
pip install avpassgen
O en modo editable para desarrollo:
pip install -e .[cli]
En Windows/macOS/Linux deben existir dispositivos de cámara y/o micrófono accesibles. Si alguno falla, la librería cae en OS randomness igualmente.
Uso rápido (CLI)
avpassgen --length 24 --count 3 --duration 3
Uso en código
from avpassgen import generate_passwords, AvPassGenConfig
cfg = AvPassGenConfig(duration_s=3.0, use_video=True, use_audio=True)
passwords = generate_passwords(length=24, count=5, cfg=cfg)
print(passwords)
Seguridad
- Mezcla entropía A/V con
os.urandom()vía HKDF-SHA256. - Verifica heurísticamente la entropía (umbral configurable).
- Para login reproducible, usa en su lugar una librería determinista (imagen+frase) o activa
deterministic_saltsabiendo que entonces será repetible.
Limitaciones
sounddevicerequiere PortAudio (ruedas precompiladas suelen estar disponibles).- En entornos sin dispositivos, la entropía provendrá del OS.
- Las estimaciones de entropía son heurísticas; para producción, añade baterías de tests (NIST SP 800-90B).
Publicación
Disponible en PyPI:
https://pypi.org/project/avpassgen/0.1.0/
1 maintainer
Metadata
1 maintainer
Release files for avpassgen 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| avpassgen-0.1.1.tar.gz | 20.3 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| avpassgen-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 40.7 kB
Release files / avpassgen-0.1.1.tar.gz
| Download URL | avpassgen-0.1.1.tar.gz |
|---|---|
| Size | 20.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
89cd70b5a02ea4fb159bd95a1cbce714c5f0f74d2837a21f27c2dafdc512839a
|
|
BLAKE2b-256 checksum How to use checksums |
b4737e9b09e42ebb68daf26abd27f7dd6afe1d5e5fc30838fd94f69309974782
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.5
|
Release files / avpassgen-0.1.1-py3-none-any.whl
| Download URL | avpassgen-0.1.1-py3-none-any.whl |
|---|---|
| Size | 20.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
19e5cd92c816723de9361a6a11485731fee1a57d18bbe8eeaceff206127f5ecc
|
|
BLAKE2b-256 checksum How to use checksums |
5ea764179254b813d34d36bb2d79df83e752b32769bb8616e03f99ff5eb18b1d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.5
|
Security for avpassgen 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
