> Any system that reminds you of the full passphrase has to store the passphrase unhashed Store it encrypted (the same way you encrypt the payload; you can kee

> Any system that reminds you of the full passphrase has to store the passphrase unhashed Store it encrypted (the same way you encrypt the payload; you can keep around a single copy of the encrypted full passphrase so you don't have to add it to any actual payload). Iff you have a match of one of the hashes, you can decrypt the full passphrase and hence show it.