I know there are key-exchange methods in Cryptography. But in case of Secret-key Steganography, what actually stego-key means and how can we use the key and once used how we exchange that with the receiver?
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
5
The way in which the stego key is used depends on the type of media and algorithm used for hiding data. For example, in image steganography the stego key is used to select the pixels where the data will be hidden. An attacker without the key does not know what pixels he have to read.
Note that before hiding data is usual to encrypt the message so a crypto key is also needed.
On the other hand, the mechanism used to exchange a key using steganography is known as Public-Key Steganography. Check the following reference:
https://www.cs.cmu.edu/~biglou/pubkeystego.pdf
A simple option is to use public key cryptography hiding the message encrypted with the public key into the image (we do this without stego key, so that anyone can extract it). An attacker that extracts the message will not be able to tell whether the data extracted is a cipher text or random noise. Only the one with the private key will be able to read the message.
-
$\begingroup$ I want to hide data(text) into the image. For this purpose, if I use public key then I need to use CA also? For such case how can I use the stego key? $\endgroup$ Commented Mar 13, 2019 at 12:27
-
$\begingroup$ I have edited my answer, I hope that now it is clear. $\endgroup$ Commented Mar 13, 2019 at 17:41
-
$\begingroup$ Very much helpful, thanks. Just one thing that for Public key cryptography I need Certificate authority also or I can just share the public key in plain text? $\endgroup$ Commented Mar 14, 2019 at 5:04
-
$\begingroup$ Also can I use the stego key in a manner like: I scramble the msg first with different algos and assign a specific key for the algos. Then share the key to receiver just to tell which algo to use... $\endgroup$ Commented Mar 14, 2019 at 5:06
-
$\begingroup$ Better if you use a CA or you have your pubkeys signed. I don't understand the second question: if you can share a key with the receiver, you do not need public key steganography. $\endgroup$ Commented Mar 15, 2019 at 8:33