<div dir="ltr">I don't think the words necessarily need to be spelled out. With some processing, couldn't you could remove all words from the list that have low edit distances from each other, thereby ensuring that (if both parties have the words in front of them) letter-by-letter transcription is unecessary? Also I think saying all of these rare words is actually fun. But I'm probably not your typical user :) </div><div class="gmail_extra"> <div class="gmail_quote">On 5 February 2014 17:35, Trevor Perrin <<a href="mailto:trevp@trevp.net" target="_blank">trevp@trevp.net</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Wed, Feb 5, 2014 at 4:47 PM, Moritz Bartl <<a href="mailto:moritz@headstrong.de">moritz@headstrong.de</a>> wrote: > Hm. Sorry, stupid question, but why can't you simply map 4-tuples to a > 65k wordlist? Fantasy names, English, something more pronounceable? > There could maybe even multiple "authoritative tables" in various languages. </div>Do you have an example wordlist? With a 65K dictionary you'll need 8 words for a 128-bit security level. I tried a couple random word generators on the Internet: <a href="http://www.wordgenerator.net/random-word-generator.php" target="_blank">http://www.wordgenerator.net/random-word-generator.php</a> (claims 90K words) cowhage - ekasilicon - democratist - clum - dyslexia - farfetched - furrier - mangosteen matric - beadsman - enterlace - oarswoman - secretitious - incisor - danite - linstock potash - intersert - possum - verbarfunambulo - additionally - enterotome - turrethead - telegrammic - clupeid --- <a href="http://www.wordreference.com/random/definition" target="_blank">http://www.wordreference.com/random/definition</a> (skipping proper nouns) obstacle - isotherm - pestilential - woodsman - fleet - arrowhead - downgrade - chinwag mansuetude - sinistrorse - sporophyte - qawwali - bell - bipinnate - boathook - bewitch elutriate - gesture - unapproachable - pooh-pooh - rodomontade - cameleer - malfunction - buoy --- Compare to pseudowords: wivoig - datu - siwep - muvu - wkegod rahixe - xniy - fxube - avwo - egujef atop5l - udag - bofoc - ihin - roybuz I like the smaller size of the pseudowords, particularly for transcribing these things, spelling out the characters over the phone, or viewing on a small screen. And a lot of the words are unusual so are going to need to be spelled out. But it would be interesting to see what a better wordlist looks like. Trevor <div class="HOEnZb"><div class="h5">_______________________________________________ Messaging mailing list <a href="mailto:Messaging@moderncrypto.org">Messaging@moderncrypto.org</a> <a href="https://moderncrypto.org/mailman/listinfo/messaging" target="_blank">https://moderncrypto.org/mailman/listinfo/messaging</a> </div></div></blockquote></div> </div>