# One-time pad encryption - how does the receiving side decrypt the message?

If a message is sent using one-time pad scheme, which generates random bits in order to, for example, XOR them with the message's bits - how does the receiving side generate the exact series of bits ?

If the receiving side is able to generate the same series then how is it still random ?

• The receiving side needs to receive an explicit copy of the random bits. – SEJPM Feb 9 '19 at 14:45
• And said random bits have to remain secret. In the rare practical cases when the OTP is used, the random bits are generated in advance of transmission, and sent by secure means such as trusted couriers. – fgrieu Feb 9 '19 at 15:18

## 1 Answer

The one-time pad requires pre-shared key. Usually, one of the two parties generates the keystream, write into a paper or CD/DVD, or USB etc.. and sends the keystream to the other party in a secure way. The secure way is not encryption, it is using some men to carry it to the target. After the transmission, they can use the key to decipher.

Wikipedia lists historical uses of one-time pad. One case is very important; the Venona Project. At some point, the Russian had reused some part of the key. So, the question is how one notices this? The USA and British Code-breakers always tried the crib-dragging and one day were successful!

Some of The Crib Draggin answers in CryptoSO;

• A coincidence test suffices to detect re-use. No need for crib-dragging for that. See the classic texts by Friedman etc. – Henno Brandsma Feb 10 '19 at 22:19
• @HennoBrandsma good point. When I see the coincidence test I remembered but needs to refresh. Thanks. – kelalaka Feb 10 '19 at 22:31