1
$\begingroup$

Encrypting text with a computer has problems: we need to worry about hardware backdoors in processors, motherboards, and extension cards, software backdoors in OS, vulnerabilities in software, and viruses.

Computers are so complex that no single person knows every detail of how they work. It makes it impossible to examine every single part of hardware and software, so we can only hope that the computer isn't maliciously modified.

Encryption machines like Enigma don't have all these weaknesses. I know that Enigma is broken. Are there other ways to encrypt text with a password without a computer, but still secure by modern standards?

(I know that one-time pads are secure, but they require a random key to be stored somewhere, so it doesn't count as protection by password only).

Improve this question
$\endgroup$
4
  • 1
    $\begingroup$ See this question about cryptosystems one can do with a pen & paper, and this question about related terminology to help your search $\endgroup$
    – Morrolan
    Feb 9 at 12:06
  • $\begingroup$ As an aside, I'd be hesitant to claim that 'encryption machines' are less likely to contain backdoors, given some recent happenings. $\endgroup$
    – Morrolan
    Feb 9 at 12:07
  • $\begingroup$ This is a comment as it only relates to a question paragraph (2nd) and not the nub of the question. Virtually all computers’ functions can be externally validated through testing. Even stuff like encryption can be tested against test vectors and against other computers, perhaps of different architectures. You can even write your own tests. There is also a plethora of μcontrollers that can be used, including those manufactured in non allied regimes. See What's the reason for Monte Carlo tests for block ciphers? . $\endgroup$
    – Paul Uszak
    Feb 9 at 13:16
  • $\begingroup$ Modern processors have closed source blobs in microcode, which can't be validated. Also, backdoors might be included at microscopic level inside processor cristals - to detect those it is necessary to scalp the processor, scan it with electric microscope and reverse-engeneer it, which is not only laborious and expensive, but will also destroy the processor. Plus, Intel ME has encrypted microcode with unrestricted access to memory and network, making it a perfect place for a backdoor - which can't be validated either. $\endgroup$
    – Arqwer
    Feb 12 at 9:06

1 Answer 1

Reset to default
1
$\begingroup$

Try Solitaire cipher https://en.m.wikipedia.org/wiki/Solitaire_(cipher) As of today it has some known weaknesses but still can't be practically broken. It requires a deck of cards in a certain order bot just a password as a key.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.