[sdevlin]

> Using "one-time-use combinations of three English words" is "fine" only if your definition of "fine" includes allowing someone with a minimal budget to find out the password in less than a year.

Magic Wormhole uses a PAKE to establish a secure channel from a low-entropy shared secret.

[AnaniasAnanas]

I admit that I missed that part. My mistake, I apologise.

[tptacek]

You might also acknowledge your faulty critique of systems that use XSalsa20.