1 files changed, 26 insertions, 12 deletions

diff --git a/49.md b/49.md
index becc586..731f132 100644
--- a/49.md
+++ b/49.md
@@ -7,26 +7,26 @@ Private Key Encryption
 
 `draft` `optional`
 
-This NIP defines a method by which clients can encrypt (and decrypt) a user's private key with a passphrase.
+This NIP defines a method by which clients can encrypt (and decrypt) a user's private key with a password.
 
 Symmetric Encryption Key derivation
 -----------------------------------
 
-PASSPHRASE = read from the user
+PASSWORD = Read from the user. The password should be unicode normalized to NFKC format to ensure that the password can be entered identically on other computers/clients.
 
 LOG\_N = Let the user or implementer choose one byte representing a power of 2 (e.g. 18 represents 262,144) which is used as the number of rounds for scrypt. Larger numbers take more time and more memory, and offer better protection:
 
-    | LOG\_N | MEMORY REQUIRED | APPROX TIME ON FAST COMPUTER |
-    |--------|-----------------|----------------------------- |
-    | 16     | 64 MiB          | 100 ms                       |
-    | 18     | 256 MiB         |                              |
-    | 20     | 1 GiB           | 2 seconds                    |
-    | 21     | 2 GiB           |                              |
-    | 22     | 4 GiB           |                              |
+    | LOG_N | MEMORY REQUIRED | APPROX TIME ON FAST COMPUTER |
+    |-------|-----------------|----------------------------- |
+    | 16    | 64 MiB          | 100 ms                       |
+    | 18    | 256 MiB         |                              |
+    | 20    | 1 GiB           | 2 seconds                    |
+    | 21    | 2 GiB           |                              |
+    | 22    | 4 GiB           |                              |
 
 SALT = 16 random bytes
 
-SYMMETRIC_KEY = scrypt(passphrase=PASSPHRASE, salt=SALT, log\_n=LOG\_N, r=8, p=1)
+SYMMETRIC_KEY = scrypt(password=PASSWORD, salt=SALT, log\_n=LOG\_N, r=8, p=1)
 
 The symmetric key should be 32 bytes long.
 
@@ -78,6 +78,22 @@ The decryption process operates in the reverse.
 Test Data
 ---------
 
+## Password Unicode Normalization
+
+The following password input: "ÅΩẛ̣"
+- Unicode Codepoints: U+212B U+2126 U+1E9B U+0323
+- UTF-8 bytes: [0xE2, 0x84, 0xAB, 0xE2, 0x84, 0xA6, 0xE1, 0xBA, 0x9B, 0xCC, 0xA3]
+
+Should be converted into the unicode normalized NFKC format prior to use in scrypt: "ÅΩẛ̣"
+- Unicode Codepoints: U+00C5 U+03A9 U+1E69
+- UTF-8 bytes: [0xC3, 0x85, 0xCE, 0xA9, 0xE1, 0xB9, 0xA9]
+
+## Encryption
+
+The encryption process is non-deterministic due to the random nonce.
+
+## Decryption
+
 The following encrypted private key:
 
 `ncryptsec1qgg9947rlpvqu76pj5ecreduf9jxhselq2nae2kghhvd5g7dgjtcxfqtd67p9m0w57lspw8gsq6yphnm8623nsl8xn9j4jdzz84zm3frztj3z7s35vpzmqf6ksu8r89qk5z2zxfmu5gv8th8wclt0h4p`
@@ -86,8 +102,6 @@ When decrypted with password='nostr' and log_n=16 yields the following hex-encod
 
 `3501454135014541350145413501453fefb02227e449e57cf4d3a3ce05378683`
 
-The reverse process is non-deterministic due to the random nonce.
-
 Discussion
 ----------