Questions tagged [plausible-deniability]

Plausible deniability may refer $1)$ to deniable encryption schemes allowing the decryption of a ciphertext for a message $m$ to some distinct message $m'$ or $2)$ to a feature provided by deniable file systems.

Filter by
Sorted by
Tagged with
2
votes
2answers
343 views

Does libsodium sealed box leak key ids?

I am using python and libnacl, which is a libsodium wrapper, to develop an application where users can deposit encrypted data. Alice uses ...
1
vote
0answers
90 views

Could you design something like a ring signature that uses website accounts instead of keys?

Ring signatures allow one to prove that you own a private key corresponding to a public key from a set of keys, without revealing which private key you control. This is useful if you are part of some ...
5
votes
2answers
143 views

Plausibly deniable authentication for agents on multiple teams

Here's a problem that I've been thinking about: An individual, Alice, wishes to authenticate herself. She may wish to authenticate to Bob (who is on the blue team) that they are both on the blue team....
2
votes
1answer
580 views

What exactly is “Plausible Deniability in Internet Protocols”?

I am trying to understand the meaning of "Plausible Deniability Feature of Internet Protocols". To be specific, I am not able to understand what "Plausible Deniability" exactly means. Could someone ...
4
votes
3answers
482 views

Deniability properties of the X3DH Key Agreement Protocol

Signal's X3DH Key Agreement Protocol specification states in section 4.5.: Alternatively, it might be tempting to replace the DH-based mutual authentication (i.e. DH1 and DH2) with signatures from ...
2
votes
0answers
94 views

Plaintext DH keys in the message header in the Double Ratchet Algorithm

I've been reading details about the Double Ratchet algorithm, and I wanted some clarification regarding the aspect of the DH public keys going out in the plain in the header of every message. Quoting ...
1
vote
1answer
105 views

Perfect Deniability of a MAC Protocol

I proposed an idea of Perfect Deniability of a MAC I tried to come up with a protocol that satisfies those security requirements as well as the normal security requirements of a MAC One-Time MAC ...
2
votes
1answer
250 views

Plausible Deniability in Schnorr

How does a dishonest verifier affect plausible deniability of the interactive Schnorr protocol?
2
votes
1answer
87 views

How to deniably send a value

Alice has a single bit of information, b, that she wants to send to Bob (over an unalterable but possibly-monitored channel) but in such a way that without the ...
5
votes
0answers
153 views

Why reveal MAC keys after using them?

As far as my understanding goes, MACs are used to determine whether the received message comes from a source with access to a MAC-key, which both parties know. Some crypto protocols reveal their used ...
1
vote
1answer
181 views

Algorithm accepting every passphrase to fool unlegit user [closed]

I'm looking for specific names and literature on crypto algorithms that accept every passphrase input by the user, in order to 'decrypt' - even with false passphrase - and present the unlegit user ...
5
votes
4answers
458 views

A specific way for deniable encryption

I read the summary of deniable encryption on wikipedia: https://en.wikipedia.org/wiki/Deniable_encryption Then I read a question, by doom123 on security.SE: https:/...
2
votes
1answer
275 views

Decryption honeypots

When performing a key search, I've always wondered how you reliably detect a successful decryption once you hit the right key. I assume that you have to analyze the data and look for patterns: words, ...