Add support for Apple passwords pattern generation

[cipriancraciun]

As described in the article:

=> https://rmondello.com/2024/10/07/apple-passwords-generated-strong-password-format/

[cipriancraciun]

Trying to search for the algorithm, I couldn't find any mentions, but I've tried to generate a few passwords and listed them below for analysis. (I've removed the capital letter, as it seems it can be anywhere.)

zoqhyk-2wykwy-dymdaw
cugciw-ricmu1-zatsem
sufga8-zodgox-kybpak
wuxha0-cosvuf-zoswak
pepvir-6voxmo-bafmaw
racxy6-xebrud-dymxyh
remryr-1kursi-rodfyr
curqep-sytwep-9wajcy
fywbih-muqtoq-masca6
hyjjyj-1vekbi-rojhoh
gimgup-jehhlb-tuxxo0
tuvbyt-quqqec-0mukbu
kenrih-5kozby-zodfiz

---

tr '-' '\n' | tr -d '0-9' | sed -r -e 's#^(.{3})(.+)$#\1\n\2#' | sed -r -e 's#^(.)(.)(.)$#c:\1\nv:\2\nc:\3#g' -e 's#^(.)(.)$#c:\1\nv:\2#g' | sort | uniq -c

Analysis with the above script produced the following results:

      9 c:b
      9 c:c
      7 c:d
      6 c:f
      5 c:g
     10 c:h
      6 c:j
     10 c:k
     11 c:m
      1 c:n
      6 c:p
      7 c:q
     13 c:r
      7 c:s
      6 c:t
      5 c:v
     10 c:w
      8 c:x
      7 c:z
     12 v:a
     10 v:e
      9 v:i
      1 v:l
     14 v:o
     15 v:u
     17 v:y

[cipriancraciun]

My current assumption of the generation algorithm is the following:

• the password is made-up of three words LW-UW-DW;
• (LW) a "lower" word has the pattern cvccvc;
• (UW) an "upper" word is just a "lower" word with exactly one of the letters capitalized;
• (DW) a "digit" word has either a digit at the beginning (before the first consonant, but removing the last consonant) or at the end (replacing the last consonant) of a "lower" word; (i.e. Dcvccv or cvccvD);
• the password is actually a permutation of the three types of words;
• (c) the consonants are bcdfghjkmnpqrstvwxz (based on the analysis above);
• (v) the vowels are aeilouy (i.e. l and y are considered vowels);

[cipriancraciun]

Implemented (including a lower-case-only no numbers variant).

[cipriancraciun]

I've received the following links from the original article author:

• https://developer.apple.com/password-rules/
• https://developer.apple.com/documentation/security/customizing-password-autofill-rules
• https://developer.apple.com/password-rules/scripts/generator.js

I should reverse-engineer the password pattern from the JS implementation.