-1
$\begingroup$

They sometimes use their own cryptographic algorithm or use the third party's and sometimes use open community encryption algorithms.
But fear of being a backdoor planted in public encryption protocols scare them. Although it is technically possible to analyze crypto and find the structure, it is hard to believe, for instance, The army of a Europian country uses an encryption protocol designed in the USA.
The question remains is:
Is there any Advantage of Hiding Encryption algorithms and protocol in military systems?

$\endgroup$
5
$\begingroup$

Militaries have some options on choosing Encryption algorithms, schemes, and protocols;

  1. They can use open community encryption algorithms, schemes, and protocols that are designed and analyzed by many brilliant cryptographers.
  2. They can ask to 3rd parties to built for them if they have no Cryptographic expert in their army.
  3. They can create their own Cryptographic Algorithms and Schemes and keep the designs and analyzes to themselves.

They fear from the first option since they don't want to use the open algorithms. They think that there can be always a back door.

They use the second option if they don't have the talent and even they buy from a another country's companies. Many examples are exist in history.

For the last two option, we can see it like security by obscurity but not exactly. Oscar (the eavesdropper of the signal) has to deal many problems:

  • The communication can be online encryption that is the network traffic is always encrypted and there is always a dummy message to encrypt to keep the traffic always on even to prevent signal intelligence.
  • The even the Error Correcting Codes (ECC) can give huge disadvantage to Oscar. Which ECC is used is a problem especially if the ECC applied data is an encrypted data.
  • Below this online encryption, the officials of the army can encrypt the messages with the usual symmetric and asymmetric encryption schemes. This turn the data into double encryption.

The above list may no be complete, anyway, jump to history;

The history shows us that, obscurity is not the correct way. Remember how the Enigma was stolen and finally broken. Even when the 4th rotor was introduced, only the knowledge of the 4th hole was enough to break again. Ironically, the M-209 much easier to break which was mechanical marvel.

Today, information espionage much easier than the older times. So, in reality, the militaries also plays with the Kerckhoffs's principles. They assumes that even the designs falls into the hands of the enemy rule, too. They only use the secrecy of the design and analyze as a frontal counter measure with the deep question;

  • What if our algorithms, schemes, and protocols are not really secure as we think.
$\endgroup$
  • $\begingroup$ What do you mean by double encryption? There are always flaws or weakness or possibility of side channel attack in most algorithms, schemes, and protocols, but I think one advantage that military system has, is that they don't communicate on the internet or public channels, they have their own secure communication channel that is isolated $\endgroup$ – R1w May 31 at 14:16
  • 1
    $\begingroup$ double encryption: encrypt the channel, for example with IP-SEC, then send off-line encrypted messages over the encrypted channel. You cannot be sure that the isolated channel is not tapped. Also, during the war, you will first lose the isolated channel. $\endgroup$ – kelalaka May 31 at 14:17
  • 1
    $\begingroup$ Enigma was broken before the Poles even saw the Wehrmacht model. The reconstructed the wheels by maths alone. They didn't steal a machine. $\endgroup$ – Henno Brandsma May 31 at 21:54
  • $\begingroup$ @HennoBrandsma If I remember correctly, the Poles saw the internal from a drunk German officer in a Polish pub. $\endgroup$ – kelalaka May 31 at 22:15
  • $\begingroup$ @kelalaka This is not in Kahn’s standard monograph on the Enigma. $\endgroup$ – Henno Brandsma May 31 at 22:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.