otp/TODO.md

TODO

Change technique for adding keyboard entropy.

Some of the processing seems similar, so maybe code could be more compact.

Command line otp -e should go to default pad, and then comment after the fact that it used the default pad.

There is the problem of the location of the pad revealing metadata about how many messages have been sent in the past, or at least the size of the messsages.

One solution could be to start the pad at a random location, and then wrap around, so an attacker could never tell the size of the past text sent. This helps. But then you have to store the start location, which you could do within the header of the pad along with the pad?

Or, better yet, assume the offset is a very large size, and use the pad itself to encrypt the offset.

Take a look at how the file header is being handled.

We have three different decrypt file functions

Preferences directory and files look off. Should probably have ~/.otp as the default directory, and then in there we can have otp.conf, pads/

Setup for multiple USB drives