Questions tagged [plausible-deniability]

Plausible deniability may refer $1)$ to deniable encryption schemes allowing the decryption of a ciphertext for a message $m$ to some distinct message $m'$ or $2)$ to a feature provided by deniable file systems.

Filter by
Sorted by
Tagged with
1 vote
1 answer

Many-out-of-many proofs

I need to prove that given vector of commitments of length N contains N-1 commitments to zero (and one to an arbitrary number). More formally, given vector: $$\textbf{a} = \begin{bmatrix} C(0, r_1)...
Seed Barret's user avatar
1 vote
1 answer

How does the plausible deniability used by TrueCrypt work mathematically?

I have been unable to find any mathematical explanations on how TrueCrypt's plausible deniability encryption works, when using TC containers. Would someone be able to provide a mathematical ...
securityauditor's user avatar
1 vote
1 answer

Can one infer concatenated ciphertext block boundaries through digital forensics?

Say one encrypts multiple plain text blocks with same IV but different keys using AES-256-CBC, can one infer concatenated ciphertext block boundaries through digital forensics? Example Plain text ...
sunknudsen's user avatar
2 votes
2 answers

Does libsodium sealed box leak key ids?

I am using python and libnacl, which is a libsodium wrapper, to develop an application where users can deposit encrypted data. Alice uses ...
Brolf's user avatar
  • 23
1 vote
0 answers

Could you design something like a ring signature that uses website accounts instead of keys?

Ring signatures allow one to prove that you own a private key corresponding to a public key from a set of keys, without revealing which private key you control. This is useful if you are part of some ...
PyRulez's user avatar
  • 819
5 votes
2 answers

Plausibly deniable authentication for agents on multiple teams

Here's a problem that I've been thinking about: An individual, Alice, wishes to authenticate herself. She may wish to authenticate to Bob (who is on the blue team) that they are both on the blue team....
Stack Tracer's user avatar
2 votes
1 answer

What exactly is "Plausible Deniability in Internet Protocols"?

I am trying to understand the meaning of "Plausible Deniability Feature of Internet Protocols". To be specific, I am not able to understand what "Plausible Deniability" exactly means. Could someone ...
3h3j0k3r's user avatar
4 votes
4 answers

Deniability properties of the X3DH Key Agreement Protocol

Signal's X3DH Key Agreement Protocol specification states in section 4.5.: Alternatively, it might be tempting to replace the DH-based mutual authentication (i.e. DH1 and DH2) with signatures from ...
Cybran's user avatar
  • 183
5 votes
2 answers

Plaintext DH keys in the message header in the Double Ratchet Algorithm

I've been reading details about the Double Ratchet algorithm, and I wanted some clarification regarding the aspect of the DH public keys going out in the plain in the header of every message. Quoting ...
QPTR's user avatar
  • 151
1 vote
1 answer

Perfect Deniability of a MAC Protocol

I proposed an idea of Perfect Deniability of a MAC I tried to come up with a protocol that satisfies those security requirements as well as the normal security requirements of a MAC One-Time MAC ...
edggy's user avatar
  • 453
2 votes
1 answer

Plausible Deniability in Schnorr

How does a dishonest verifier affect plausible deniability of the interactive Schnorr protocol?
user45255's user avatar
2 votes
1 answer

How to deniably send a value

Alice has a single bit of information, b, that she wants to send to Bob (over an unalterable but possibly-monitored channel) but in such a way that without the ...
TLW's user avatar
  • 198
5 votes
0 answers

Why reveal MAC keys after using them?

As far as my understanding goes, MACs are used to determine whether the received message comes from a source with access to a MAC-key, which both parties know. Some crypto protocols reveal their used ...
Spyro's user avatar
  • 131
1 vote
1 answer

Algorithm accepting every passphrase to fool unlegit user [closed]

I'm looking for specific names and literature on crypto algorithms that accept every passphrase input by the user, in order to 'decrypt' - even with false passphrase - and present the unlegit user ...
user3200534's user avatar
5 votes
4 answers

A specific way for deniable encryption

I read the summary of deniable encryption on wikipedia: Then I read a question, by doom123 on security.SE: https:/...
Shashank Sawant's user avatar
2 votes
1 answer

Decryption honeypots

When performing a key search, I've always wondered how you reliably detect a successful decryption once you hit the right key. I assume that you have to analyze the data and look for patterns: words, ...
Alexander Torstling's user avatar