163 reputation
6
bio website
location
age
visits member for 1 year, 9 months
seen Mar 8 at 10:36

Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
A few points here, while they say AES is good to protect up to Top Secret level, I don't think that's the highest classification level the US government have. Maybe that's the highest level the public know about. But what encryption are they using to protect their nuclear launch codes or military communications in wartime? Probably a lot stronger encryption. You'll notice they don't publicly give this information out, that's a pretty big hint right there.
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
If they wanted to communicate with more people then the software would let them generate another database of pads for each person, the software would save it to a removable storage device for them etc, then the only real hassle for the user is delivering it manually to the recipient. Is /dev/random the best/most feasible way for doing the random number generation? If the message is a short message, like "hi" or "hello" is it worth filling up the remaining message (up to 160 characters) with random data so it's less likely they can guess the original plain text?
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
Ok great, now we're getting somewhere, thankyou! I agree that it is a lot of work to implement properly, but my plan is to design it really well so all the hard and tedious stuff is abstracted away from the user. So basically the software is doing all the hard work in generating the random pads, storing them, integrity checking, sending messages etc. The user would simply have to load up the app, enter in a password which would decrypt the local AES/Twofish encrypted database of pads & messages then they go to sending messages.
Oct
26
awarded  Supporter
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
@Thomas May be overkill, depends who's using it. What are these "dozens of other issues"? That's what my post is asking. How about an actual answer and listing them? What integrity checks would you use? The reason for OTP, is that it can't be decrypted now or in the future, or by a government that has unpublished knowledge about weaknesses in encryption that are currently in use, or a government having supercomputers that make cracking it trivial. Conspiracy theories aside it would be interesting to implement and also give two parties peace of mind that no-one else could read their messages.
Oct
26
asked Would this simple encrypted chat program be feasible using One Time Pads?