[Freeipa-devel] [freeipa PR#317][comment] Unify password generation across FreeIPA

[mbasti-rh]

  URL: https://github.com/freeipa/freeipa/pull/317
Title: #317: Unify password generation across FreeIPA

mbasti-rh commented:
"""
> The passwords should have around the same entropy now. SHA-1 actually produces 160bit outputs (hence 40-characters long hexadecimal digests), so I recounted it for 20-bytes entropy.

Sure, my bad

As we discussed offline, due NSS FIPS requirements, we should get rid off base64 encoding. I wouldn't remove space from there, can you check if NSS supports it?
"""

See the full comment at https://github.com/freeipa/freeipa/pull/317#issuecomment-265713667