Simple web index to use bloom filter for Pwned Passwords

The index.py runs a simple CGI web service checking passwords with a bloom filter for the Pwned Passwords list. It uses the bloom.py script by Hector Martin. A copy is included in this repo.

In addition, you will need:

• Bloomfilter file based on Pwned Passwords list (SHA-1, ordered by hash) by Troy Hunt. Unfortunately, a simple download of the Pwned Passwords list is no longer available. The last version can be found at the Internet Archive.

To create the bloomfilter file:

• Get and unpack the latest Pwned Passwords list (SHA-1, ordered by hash).

• Count lines (n):

    wc -l [list].txt
  

• Calculate m and k with https://krisives.github.io/bloom-calculator/.

• Create filter:

    cat [list].txt | cut -d: -f1 |./bloom.py load -m [m] -k 11 -l passwords-vX.bloom /dev/stdin
  

Example values: