# Tag Info

Unless otherwise noted, I assume adversaries know the genuine QR-code, and can alter it and submit it for decryption. I posit the design requirements are: Confidentiality of $\text{seed}$, to as high a level as the passphrase + key stretching of Argon2 allows. Integrity of $\text{seed}$, to 64-bit security level [ample in the context, where we want to catch ...