From 5b591e35d8063b0125c7520d1fe4e035ee881346 Mon Sep 17 00:00:00 2001
From: Randall Winkhart <idgr@tutanota.com>
Date: Sat, 7 Feb 2026 16:29:05 -0500
Subject: [PATCH] Document manual sanity check when not using RCWD

---
 crypt/rcw.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypt/rcw.go b/crypt/rcw.go
index 67d8043..148e564 100644
--- a/crypt/rcw.go
+++ b/crypt/rcw.go
@@ -55,6 +55,7 @@ func DecryptFileToSlice(realPath string, rcwPassword []byte) ([]string, error) {
 
 // EncryptBytes encrypts a byte slice using RCW and returns the encrypted data.
 // Leave rcwPassword nil to use RCW demonization.
+// If providing rcwPassword, it is up to the client to perform the sanity check!
 func EncryptBytes(decBytes, rcwPassword []byte) []byte {
 	// if no rcwPassword was provided, assume daemon mode
 	if rcwPassword == nil {