1
$\begingroup$

I'm part of a team of students from the Vienna University of Economics, which have the task to find application fields for a new technology. The technology itself is provided by an external partner, so I do not possess a lot of technical knowledge about it. As far as I understand, it is an encryption method that is able to transfer data in a manner that is (mathematically) unbreakable - as it combines one-time-pad with other security measures - and has no back door. I have included a couple of tags of technologies I know the partner is using for this or that could describe his approach.

Now we have to find use cases where this encryption could potentially be relevant. If you can think of anything where this could be used, I would really appreciate your input. Actual uses in companies, uses in day-to-day life, uses in a specific work process - just think of it as brainstorming, really anything goes no matter how trivial or technical. Thanks a lot for your help!

Improve this question
$\endgroup$
5
  • 8
    $\begingroup$ Based on your explanation, your external partner is probably selling snake-oil. $\endgroup$
    – Mikero
    Commented Mar 28, 2022 at 18:40
  • 2
    $\begingroup$ Since you're not in the crypto world, here is an explanation of what we mean by "snake-oil"; that is a product that is touted to solve all the user's problems, but in reality does little if any good. The term dates back to patent medicine peddlers back in the 18th century, which would sell medical panaceas to unsophisticated customers. Nowadays, we in the cryptoworld have seen a number of different vendors selling products with similar hype (and, on examination, similar uselessness) - a common theme among these are citations of "one-time-pad" (which is, in practice, practically useless). $\endgroup$
    – poncho
    Commented Mar 28, 2022 at 19:12
  • 1
    $\begingroup$ I would like to add to my totally dismissive comment above. It is possible that the appearance of snake oil is a result of legitimate cryptography being "lost in translation" since the OP admits to being unfamiliar with the technical aspects. $\endgroup$
    – Mikero
    Commented Mar 28, 2022 at 19:56
  • 1
    $\begingroup$ Would people stop tag-spamming their posts with "post-quantum-cryptography", "zero-knowledge-proofs", and alikes which while look like appealling buzzwords, the usage of which make them look dumb? $\endgroup$
    – DannyNiu
    Commented Mar 29, 2022 at 4:57
  • $\begingroup$ Any chance that you're dealing with FinalCrypt? $\endgroup$
    – Paul Uszak
    Commented Mar 29, 2022 at 15:21

1 Answer 1

Reset to default
7
$\begingroup$

You should know that "mathematically unbreakable because it is based on one-time pad" is a huge red flag. If their algorithm "combines one-time pad with other things" then it is not "mathematically unbreakable." If they don't know this, then you are absolutely dealing with a crackpot. If it is mathematically unbreakable then it is also certainly useless, because unbreakable encryption is known to be inherently very limited. If it is not mathematically unbreakable, then in my opinion it is highly unlikely to be better than standard encryption developed through global, open standardization efforts.

Finally, in my opinion, new encryption algorithms are simply not viable for commercialization. The cryptography community builds confidence in security by open scrutiny of algorithms, not secrecy. The community will never widely adopt new cryptography that is encumbered by patents or intellectual property restrictions -- there is precedent for this (see OCB, which is arguably better than more popular AEAD schemes but was never widely adopted due to its patents, even in light of a very generous blanket license). As I mentioned above, it is highly unlikely that this new encryption has any actual competitive advantage over the state of the art. Even if it did, no one is willing to pay for an encryption algorithm.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.