Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: Bruce Stephens <bruce+usenet@xxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 12 May 2008 21:19:29 +0100
austin.obyrne@xxxxxxxxxxxxxx writes:
[...]
Does this mean you have a computerised working one-time pad ?
No, it means that OTP is simple, but (outside of some niche
applications) useless.
Take the usual XOR of bytes system, then it's 5 minutes work to write
a program that takes any two of {key, plaintext, ciphertext} and
produces the third. (Maybe 10 or 15 minutes, I guess, depending on
the environment. It's easier to get at bytes and do XOR with some
environments than with others.)
The tricky part is (as discussed last time) key management. If I can
send n bytes of key securely, then I may just as well send my n bytes
of text securely and not bother with encrypting it at all.
There are some situations where the premise makes sense: maybe you can
take a key with you, and then later I send the encrypted message.
Or maybe I can send key and message through two different paths such
that it's very unlikely that someone can get both. (That's more
usually called secret splitting, I think, and usually you want some
general form where you split the secret into X parts and you want it
to be reproducible with any Y or more of those parts---that kind of
thing. AFAIK vector techniques are commonly used for this (they are
in descriptions of it, anyway---maybe not in reality).)
Whatever. In no cases is an implementation of the basic OTP algorithm
of any interest: it's all in how you manage the keys. And managing
the keys is intrinsically hard by the nature of the thing. That's why
you (almost) never want to use OTPs.
And (as we said last time) if your algorithm relies on the key being
the same size as the plaintext, then your algorithm has the same
problems as OTP.
And your algorithm is more complex than OTP, so your algorithm loses
(since OTP has perfect security---maybe yours does, too, but there's
no value in looking).
[...]
.
- Follow-Ups:
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: austin . obyrne
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- References:
- Non-Scalar Cryptography - The Emporor is stark naked.
- From: austin . obyrne
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: Joseph Ashwood
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: austin . obyrne
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: Bruce Stephens
- Re: Non-Scalar Cryptography - The Emporor is stark naked.
- From: austin . obyrne
- Non-Scalar Cryptography - The Emporor is stark naked.
- Prev by Date: Re: Knapsack Cipher
- Next by Date: Re: Non-Scalar Cryptography - The Emporor is stark naked.
- Previous by thread: Re: Non-Scalar Cryptography - The Emporor is stark naked.
- Next by thread: Re: Non-Scalar Cryptography - The Emporor is stark naked.
- Index(es):
Relevant Pages
|
|