network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 6 months |
| seen | May 2 at 4:53 | |
| stats | profile views | 1 |
|
Dec 7 |
accepted | Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? |
|
Dec 5 |
comment |
How can I validate a hashed password if all I have is another hash? You can try out this solution here which does what you want I think. Also it uses a nonce to prevent replay attacks. |
|
Dec 2 |
revised |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? added 30 characters in body |
|
Dec 2 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? I think there seems to be a bit of a purist attitude towards how random the key material needs to be for these OTPs. If it takes a very long time to generate perfect randomness with a proper random number generator then the entire OTP scheme is not very usable. I think after steps 3 & 4 and the random song/tv/movie data is randomized and sampled, if the key data is unpredictable enough for even many supercomputers to determine the next byte in the key sequence and subsequently decrypt the message then surely that's good enough for practical use. |
|
Dec 2 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? Thanks @Stephen. Looking at the WAV format, it looks like it won't be particularly useful unless the file is parsed and I only retain the "data subchunk" (orange colour from the diagram) which is the raw sound data as that's going to be more random. Then we'd have to strip out the null bytes too. TV and movie data may be better. |
|
Nov 30 |
revised |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? edited title |
|
Nov 30 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? If the whole entropy is generated by the user, e.g. by moving my mouse around, tapping on the keyboard, pulling in data from /dev/random and even plugging in a random number generator dongle, how long would it take to make 200MB of usable random key material? My idea is, there's already a lot of data just sitting on a person's hard drive in the form of entertainment data which is going to be pretty unique already depending on a user's taste in music etc, why not randomize and sample that, then you can generate a lot of key material very quickly. |
|
Nov 30 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? The thing about 620 million songs might be nothing in cryptogrophy, but remember in WAV format, that might be 45MB on average per song. This is about 26 Petabytes of information or 2.9 x 10^16 bytes of information if my maths is correct. Also if we combine in TV shows/movies at 1200MB per episode/movie in 720P/XviD format then there's over 28 PB of information. Somewhere in there the OTP key is made up of this 28PB of information, in some random order. Who has the resources to find the original OTP key from this information and the ciphertext they intercepted? |
|
Nov 30 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? I changed step 3. Once all the tv/movie data is joined together, what about randomizing all of the data? The user can provide some input using their mouse/keyboard which will provide some entropy into the randomizing function. Then in step 4 the sampling rate could be user variable too, i.e. it pulls out the 7th byte, then the 3rd byte after that, then the 5th byte after that. Pretty much you'd have an unknown selection of tv/movie data, which is then randomized, then sampled at an unknown rate. 1000 MB of data might only produce 200MB of key data which would be plenty for sending messages. |
|
Nov 30 |
awarded | Editor |
|
Nov 30 |
revised |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? added 175 characters in body |
|
Nov 29 |
awarded | Commentator |
|
Nov 29 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? Also destroying the music/movies after creation of the pad wouldn't be necessary. Because who is to know which combination of movies and music you used to generate it in the first place. It's just a subset of a collection on a hard drive. Sure if the government seizes the computer they'd have a working base of media files to start with. It'll still take them many years on a supercomputer to figure out the individual media files used to make the key. By that point they might've just found the key itself anyway if it was left on the computer. All bets are off if they've got physical access. |
|
Nov 29 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? Then they've still got to keep trying bits of the ciphertext till they find something meaningful. Even if something 'decrypts' to something meaningful e.g. they get the word 'bob' out, how do they know they got the right key? It could've been a lucky guess. The correct decryption could easily be 'cat'. Surely with all the varying scenes in movies, trees moving in wind, clouds, actors, vehicles, motion, many different landscapes. When the data compiles down to a different coloured pixel which could be translated to a unique byte of data, surely there'd be enough random information there. |
|
Nov 29 |
comment |
Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? You couldn't brute force it without many super computers? First the attacker has to know the key source was made from music and movies in the first place. How are they going to know that? Then the attacker has to know which music and movies were selected at random by the user. There's literally over 620 million songs in existence and over 2.3 million tv/movies titles. Then he has to know the exact combination of those songs/tv/movies that were used to generate the key. Then be able to know the media encoding used for the music/tv/movie and account for all possible combinations of that. |
|
Nov 29 |
asked | Does a playlist of songs or movies mixed together contain enough random enough for OTP key material? |
|
Nov 2 |
awarded | Student |
|
Nov 1 |
comment |
Would this simple encrypted chat program be feasible using One Time Pads? Can I use a CSPRNG library or am I better off getting an actual hardware random number generator? If I also combine in some movements from the user e.g. keyboard strokes and mouse movements in the pad generation process is this a good idea? |
|
Oct 30 |
awarded | Scholar |
|
Oct 30 |
accepted | Would this simple encrypted chat program be feasible using One Time Pads? |
