dpg
dpg copied to clipboard
Checkwords
Currently dpg
generates following output:
Enter the sentence:
Enter the word:
-----BEGIN DPG MESSAGE-----
rcagkdapcfcmahdscrsnc^E8
rcagkdapc&C4
zapassshegoteggjimban#C7
---------------------------
---- Human Readable -------
---------------------------
rca gkd apc fcm ahd scr snc ^E8
rca gkd apc &C4
zap ass she got egg jim ban #C7
------END DPG MESSAGE------
A user has no way to verify that the inputted sentence and word were correct unless they remembered the generated password. However, remembering the generated password would go against (what I think is) the utility of dpg
.
I therefore think that it would be advantageous to provide the user the ability to check their inputted sentence and word.
As I understand it:
- the sentence is secret, so a kind of weak checksum can be displayed.
- the word is not secret (as it is the name of the website), so it can be directly outputted.
For the checksum, a color hash can be used, or a word from a small wordlist.
The dpg
output could then look like this:
Enter the sentence:
Enter the word: randomword
Checksum word: audacious
-----BEGIN DPG MESSAGE-----
rcagkdapcfcmahdscrsnc^E8
rcagkdapc&C4
zapassshegoteggjimban#C7
---------------------------
---- Human Readable -------
---------------------------
rca gkd apc fcm ahd scr snc ^E8
rca gkd apc &C4
zap ass she got egg jim ban #C7
------END DPG MESSAGE------
Thanks for opening this issue. I think that's a great idea. I'll add it to the todo list.