Just present the user with a table with all the printable characters in it, in random order each time.The user won't *type* his password, but select the appropriate characters in the appropriate order, clicking on them with the mouse.
As the position is random each time, you can't find the password clicked, even if you logged the mouse coordinates.
I emailed this idea to 2 projects creating graphic interfaces for gpg, but haven't heard from them.
Slashdot Mirror
Just present the user with a table with all the printable characters in it, in random order each time.The user won't *type* his password, but select the appropriate characters in the appropriate order, clicking on them with the mouse.
As the position is random each time, you can't find the password clicked, even if you logged the mouse coordinates.
I emailed this idea to 2 projects creating graphic interfaces for gpg, but haven't heard from them.