search

nextcloud / end_to_end_encryption_rfc

🔒 Specification for end-to-end encryption used by Nextcloud sync & mobile apps
Other
31 stars 15 forks source link

[Suggestion] Preserve spaces in mnemonic passphrase #43

Open t-m-w opened 5 years ago

t-m-w commented 5 years ago

The RFC states,

The mnemonic is displayed to the user and the user is asked to store a copy in a secure place. For convenient reasons the mnemonic can be displayed with whitespaces, but the string for encrypting/decrypting must have no whitespaces and be lowercase.

It seems like keeping the spaces part of the passphrase would simplify its (re-)display and consistency across components. What is the justification for removing them? It seems like this would make more sense to do if each word was equal length.