I had an idea for safely transmitting sensitive data online, and I wanted an expert opinion.
Would it be safe to encrypt data (for simplicity at this point just use plain text) with a ruleset (an array with specific instructions on how each letter should be encrypted by any means).
Of course, you can guess the ruleset. So my idea is that you keep on changing this ruleset.
The server controlling the data makes a new ruleset every time someone sends a new piece of data, the server then encrypts this with the RSA public key it was given to by a client.
The whole point is that if an attacker gets 1 - through the RSA encryption and 2 - through an equally complex custom encryption. He will only be able to receive one message before having to try the custom encryption all over again.
You could add layers to this and have multiple rulesets being sent and those same rulesets being encrypted by the previous ruleset. (For example if I have 2 rulesets, I send one ruleset encrypted just by RSA and another encrypted by both the first ruleset and RSA, and that second ruleset will decrypt the message. So a hacker would have to guess through the RSA, the first ruleset, and then the second, since only one message is the starting point of decryption.)
So more rulesets = more security. Since the hacker sees 1-An RSA encrypted ruleset, 2-A second ruleset, and 3-the triple encrypted text. He will have an 33% chance of starting to decrypt the correct message on the first try to start the chain reaction of decrypting all the messages, where the client has to try them all but with the private key, so it’s much faster than the attacker. (This is assuming the hacker was able to receive the first and second encrypted keys sent when the user first makes a connection. These keys will be abandoned once they are used one time)
With even more rulesets, there is a smaller chance the attacker guesses which message is the starting point of decryption. The keys are sent at random, so it makes it harder for the hacker to just start with the first key.
Obviously this is not fast. But my idea is that having to solve a new custom encryption method 5 times for only one specific question would be quite annoying for a hacker.
I’m not an expert on any of this, I kinda just had a thought and wanted an expert opinion on this concept.