Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I came up with a truly new method of applying modulo-2-addition encryption function in stream ciphers which is inspired by a mechanism used to prove a mathematical theorem. How can I determine whether my method is cryptographically correct and considerable? If so, how can I officially submit or formally register it in my name? And finally, can I make money thorough this method just by selling it to an encryption company or organization?

EDIT

Hi everyone, thanks for all answers and comments. It seems quite heartening. I know that modulo 2 operation is equivalent to XOR (exclusive OR operation in Boolean Algebra) gate in electronics. As you all know, the overriding issue concerning the security of stream ciphers is how to generate truly random key streams, and actually my newly-inspired method mainly deals with this issue. I mean this method can produce or generate random key streams in an entirely new way for either stream or block ciphers. I finally decided to publish my workings on this topic very soon for gaining cryptographic credits rather than just making money.

share|improve this question
2  
As for the money, I've done some work on standardization, and if there is even a possible patent application then we won't use an algoritithm, let alone if we have to pay for it. It's not that we would not want to spend the money for it, it's more because we don't want to force others to fork over any cash (or go through the trouble of getting a license). –  owlstead Aug 25 '12 at 16:18
    
Modulo-2-addition ? I.e. "xor" ? –  Tom Leek Aug 26 '12 at 0:16
2  
Don't be too hopeful. It's very likely that your method is badly broken. –  CodesInChaos Aug 31 '12 at 16:40
1  
Good question. I'd suggest reading Schneier's Memo to the Amateur Cipher Designer –  rath Jan 5 at 22:55

3 Answers 3

up vote 8 down vote accepted

Write a reference implementation and a paper and and publish it. If it's good enough somebody might look at it.

You won't make any money with it. There are too many good and free algorithms available.

share|improve this answer
1  
"You won't make any money with it" - Not directly, but it is possible that a good crypto algorithm will get you a good job/research position etc –  figlesquidge Jan 5 at 11:18

How can I determine whether my method is cryptographically correct?

Well, that depends quite a bit on what your primitive does, and what security properties you claim for it. As for examples of security properties, you might claim it does privacy (someone without the key cannot determine anything about the plaintext) or integrity (if someone without the key modifies the message, with high probability the decryptor will notice it).

In general, determining whether an encryption method is secure is a hard problem. However, if your method takes a keystream (generated from outside your solution) as long as the message, and combines it somehow to form the encrypted message, and your aim is to provide privacy, it turns out there's it may be easy to show: show that for every pair of plaintexts and ciphertexts of the same length, there exists one possible keystream that would convert that plaintext into that ciphertext (or, more generally, exactly $N$ keystreams, for some fixed $N$ independent of the plaintext/ciphertext). If you can show that, then you've shown that if the attacker cannot distinguish the keystream from random, he cannot gain any information from the ciphertext (because, as far as he can tell, all plaintexts are equally possible); hence you have a secure solution (as long as you use a cryptographically secure keystream generator).

How can I determine whether my method is cryptographically significant?

Well, that's actually fairly easy: with extremely high likelihood, it isn't. If it is just a way to combine a plaintext and a key stream, well, you might be able to show it's secure, but we have existing ways to combine plaintexts and keystreams, and those work quite well. If my guess is wrong, and you've got something else, well, you need to show cryptographically correctness first (and if that involves showing some computational problem is hard, that's extremely difficult to show, even if you got it right, which you probably haven't).

Can I make money thorough this method just by selling it to an encryption company or organization?

Another easy question: no. There are lots of encryption algorithms which are both free and have been vetted by respected cryptographer (the types that have broken other ciphers). Why would anyone pay you anything, when they can get better solutions for free?

share|improve this answer

Modulo 2 addition is a synonym for xor. $0\oplus0=0$, $0\oplus1=1$, $1\oplus0=1$, $1\oplus1=2=0$.

Xor-ing the keystream and the plaintext is a very standard step in stream ciphers. If this is what you mean by mod 2 addition, unfortunately you are not the first to come up with this. If not, I'd agree with @CodesInChaos and publish a paper on it.

share|improve this answer
    
Hi everyone, thanks for all answers and comments. It seems quite heartening. –  Lesbegue2012 Aug 31 '12 at 14:32

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.