[NEW] E2E password generator

app/e2e/client/helper.js

@@ -1,7 +1,11 @@
 /* eslint-disable new-cap, no-proto */
 
+import * as crypto_module from 'crypto';
+
 import ByteBuffer from 'bytebuffer';
 
+import { words } from './wordList';
+
 const StaticArrayBufferProto = new ArrayBuffer().__proto__;
 
 export function toString(thing) {
@@ -122,6 +126,42 @@ export async function readFileAsArrayBuffer(file) {
 	});
 }
 
+function hexString(digits) {
+	const numBytes = Math.ceil(digits / 2);
+	let bytes;
+	// Try to get cryptographically strong randomness. Fall back to
+	// non-cryptographically strong if not available.
+	try {
+		bytes = crypto_module.randomBytes(numBytes);
+	} catch (e) {
+		// XXX should re-throw any error except insufficient entropy
+		bytes = crypto_module.pseudoRandomBytes(numBytes);
+	}
+	const result = bytes.toString('hex');
+	// If the number of digits is odd, we'll have generated an extra 4 bits
+	// of randomness, so we need to trim the last digit.
+	return result.substring(0, digits);
+}
+
+// criptographically secure way of generating a number between 0-1( similar to Math.random())
+function fraction() {
+	const numerator = Number.parseInt(hexString(8), 16);
+	return numerator * 2.3283064365386963e-10; // 2^-3;
+}
+
+export function generateMnemonicPhrase(n, sep = ' ') {
+	const result = new Array(n);
+	let len = words.length;
+	const taken = new Array(len);
+
+	while (n--) {
+		const x = Math.floor(fraction() * len);
+		result[n] = words[x in taken ? taken[x] : x];
+		taken[x] = --len in taken ? taken[len] : len;
+	}
+	return result.join(sep);
+}
+
 export class Deferred {
 	constructor() {
 		const p = new Promise((resolve, reject) => {

app/e2e/client/rocketchat.e2e.js

@@ -1,5 +1,4 @@
 import { Meteor } from 'meteor/meteor';
-import { Random } from 'meteor/random';
 import { ReactiveVar } from 'meteor/reactive-var';
 import { EJSON } from 'meteor/ejson';
 import { TAPi18n } from 'meteor/rocketchat:tap-i18n';
@@ -18,6 +17,7 @@ import {
 	importRSAKey,
 	importRawKey,
 	deriveKey,
+	generateMnemonicPhrase,
 } from './helper';
 import * as banners from '../../../client/lib/banners';
 import { Rooms, Subscriptions, Messages } from '../../models/client';
@@ -257,7 +257,7 @@ class E2E extends Emitter {
 	}
 
 	createRandomPassword() {
-		const randomPassword = `${Random.id(3)}-${Random.id(3)}-${Random.id(3)}`.toLowerCase();
+		const randomPassword = generateMnemonicPhrase(5);
 		Meteor._localStorage.setItem('e2e.randomPassword', randomPassword);
 		return randomPassword;
 	}