Compatibility between devices (Apple and Microsoft have incompatible encodings)

[hakavlad]

All password inputs must be converted into Unicode Normalization Form KC, NFKC, and then encoded as UTF-8 bytes. This is to ensure compatibility between devices (Apple and Microsoft have incompatible encodings).

https://github.com/covert-encryption/covert/blob/main/docs/Specification.md#argon2-password-hashing

What do you think about it? Why doesn't age perform normalization?

NIST, OWASP, and the IETF's RFCs recommend performing normalization.

See also: samuel-lucas6/Kryptor#78