SALT Options Improvement

[feelnrg]

Hi, you recently improved the Salt options. Thank you very much for that.
Apparently, the order of the salt characters is now randomly changed. Could you please add an option to maintain the order of the salt characters?

Now, "SALT" is randomly used either before, after, or between words, which is great. However, the salt characters are also randomized.

Previous Version:
Word1Word2"SALT"

Now:
Word1Word2"TASL"
Word1"LAST"Word2

I think it's great that the "SALT" randomizes its position as a whole, but it would be very helpful if there was an option to maintain the order of the SALT characters according to the config. In the previous version, the order of the salt characters in the SALT config was not changed. This was definitely better because it made the words more legible.

An option for this would be great. Perhaps in the SALT config menu as a simple "Randomize Salts" option.
Thank you in Advance

[nitz]

Hey @feelnrg,

I've spent a little bit of time now thinking about this. Instinctively I wanted to say no, as I feel like a setting like that ends up being more of a "footgun" than not that would only reduce entropy when used. However, I can understand from a memorability standpoint why specific users may desire such a feature.

That said, I don't think I'm going to implement it at this moment. I was just talking about the UI and how it's grown a bit unwieldy as more features get tacked on. I think features such as this add an exponential complexity to the interface, even when they're just simple as a tick box.

I am going to leave this ticket open though, as it does directly apply to a larger daydream of mine. I'd like to redesign the options dialog in a way that provides more of a "builder" in terms of how the generator could be configured. I just don't know what that means exactly, or what it looks like yet haha.

For the time being, if you desperately need the functionality of the in-order salt, I'd ask that you use the previous build (or patch out the shuffling of salt in a local copy for yourself, of course.)

[feelnrg]

Hi Nitz,
Thanks for the feedback.

I understand your approach, but if you have to think about entropy when it comes to passwords composed of dictionaries, that's quite contradictory. That's precisely why we use Diceware, so that even if you use a manual entry method, you can still enter the password more conveniently via the keyboard. If you can no longer arrange the salt as you wish, it might simply no longer fit the pattern or make words more illegible.

I've made a suggestion in response to the post linked above. Maybe it'll help with the brainstorming.