158 reputation
7
bio website
location
age
visits member for 2 years, 1 month
seen Mar 8 at 10:36

Sep
1
awarded  Popular Question
Mar
8
comment Would this simple encrypted chat program be feasible using One Time Pads?
@tylo They haven't been hiring the top mathematicians and cryptanalysts in the world just to insert programmatic backdoors in software. What if their backdoors are discovered? See Apple's goto fail or the GNU TLS backdoors in the last few weeks. Their goal is all about providing a full spectrum of attack options. Obviously backdoors and broken authentication is the easiest option. Next might be broken RNGs. Followed by weakened algorithms. Next might be short key lengths. By the time you get to brute forcing keys then that becomes prohibitively expensive and time consuming on a large scale.
Mar
4
comment Would this simple encrypted chat program be feasible using One Time Pads?
@D.W. Continued... Buffer overflows etc are another threat category altogether. An attack there would require a targeted attack on the user's OS or software directly to exploit the flaw. In which case they're already compromised as the attacker has gotten something onto their machine. Explain how any other encryption system is automatically protected from this vulnerability, just because it's not a OTP? You seem to make this out to be a problem specific to OTPs when it's not. Of course for any encryption system to work you have to secure the endpoints, no doubt about it. Nothing new there.
Mar
4
comment Would this simple encrypted chat program be feasible using One Time Pads?
@D.W. What you are talking about is two different things. You have to assess your target adversary. If your adversary is more likely to intercept your encrypted communications, then it's important to have strong encryption that they can't crack, even if they store it for a long time and try again when they have more powerful supercomputers.
Feb
27
awarded  Critic
Feb
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
@CodesInChaos & DW, an important part of the OTP is it is information-theoretically secure. This means it's secure against computationally unbounded adversaries. It also means if you are interrogated (or tortured) into giving up the key, you can construct a plausible fake message (using pen & paper) then combine that with the ciphertext, thus you now have a fake key that you can give them. As digital devices are now being routinely intercepted at border crossings this is an important feature. You don't get this kind of security from a symmetric cipher nor do you have a true security proof.
Feb
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
Clearly you would need open source hardware & software, firewalls, antivirus and other security measures to properly secure the endpoints for this sort of solution. I would be interested to see your examples of other crypto products which take a holistic view of all the risks. Let's be honest, if they've developed a crypto solution that works on a closed source OS such as iOS or Windows then they're not secure either. There's no telling how many backdoors NSA have put in.
Feb
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
There are methods for information theoretically secure MACs @tylo, for example UMAC. Here's a simple method: reserve part of the OTP for encrypting the message, reserve part of the OTP for encrypting the MAC, encrypt the message, MAC the ciphertext, encrypt the MAC with the unused portion of the OTP as well. Send into the void.
Feb
20
comment Would this simple encrypted chat program be feasible using One Time Pads?
@tylo, Assuming the endpoints are secure then the whole system would work as a whole. To secure the endpoints then you would need open source software and potentially open hardware as well which may be difficult to come by. Software part is easy. Message integrity and authenticity is covered by the MAC. Key management is easy - you encrypt the keys on disk and in transit. The key is only loaded from secure storage when encrypting and decrypting, then destroyed. The security of the OTP relies on the operational security of the people communicating and transferring keys.
Feb
20
comment Would this simple encrypted chat program be feasible using One Time Pads?
@Terry, not so sure the wrench would work. Let's say the message was sent & delivered, then the key erased. The attacker only has the ciphertext. The person being threatened can invent any number of fake keys to give the person with the wrench. Person simply calculates ciphertext XOR fake message == plausible key. Person with wrench has no idea what real key or the real message is. Any number of plausible plaintexts and keys can be produced.
Aug
25
revised Does a playlist of songs or movies mixed together contain enough random enough for OTP key material?
deleted 1235 characters in body; edited title
Aug
25
revised Would this simple encrypted chat program be feasible using One Time Pads?
deleted 4848 characters in body; edited title
Jun
14
revised Would this simple encrypted chat program be feasible using One Time Pads?
added 274 characters in body
Jun
14
revised Would this simple encrypted chat program be feasible using One Time Pads?
added 274 characters in body
Jun
14
revised Would this simple encrypted chat program be feasible using One Time Pads?
added 184 characters in body
Jun
14
comment Algorithm: How to use x and y mouse movement co-ordinates to generate random data?
@fgrieu: You say it reduces the entropy per hashed character, but by how much? Do you think I should throw all the gathered entropy into a pool, combine with some other entropy (e.g. keyboard, mouse clicks, milliseconds between mouse clicks) then when I've gathered enough entropy equal to the hash bit length e.g. 256bit, then hash that string, and that can be the key?
Jun
14
comment Would this simple encrypted chat program be feasible using One Time Pads?
Why are you digging up this old post from last year to throw in more disparaging comments? Who says I'm even trying to build this anymore? I understand that crypto alone won't solve this problem. You need to actually secure the end points as well obviously (open source OS, firewalls, antivirus etc). By your argument all crypto is useless because the NSA have got malware in everything. The actual real risk these days is having your data sniffed and read over the wire by the NSA who intercept and copy all web traffic and can decrypt pretty much everything. Now stop downvoting all my old posts.
Jun
13
comment Algorithm: How to use x and y mouse movement co-ordinates to generate random data?
@fgrieu Potentially what I think we need to do is capture x,y coordinates until we have 128 bytes of unique entropy then hash it with SHA2/SHA3 hash. What do you think?
Jun
13
comment Algorithm: How to use x and y mouse movement co-ordinates to generate random data?
@fgrieu Does hashing the commas/brackets reduce entropy? Let's say I joined up 8 separate sets of coordinates, then there would be a lot of commas and brackets in that string too which aren't random. Does that matter? Also if I am hashing just a small string (the [200,330]) then hashing that, then I use that hash for my OTP key, is it theoretically possible that someone could create a rainbow table of all the possible combinations of the x,y values, then they'd have all my possible keys. Then they could get the encrypted text and try out all the keys to see if it matched?
Jun
13
revised Algorithm: How to use x and y mouse movement co-ordinates to generate random data?
added 227 characters in body