1

In preparing for a security exam, the prep book I'm reading states:

In the field of cryptography, the topic of encryption gets by far the most attention
...
...
Other techniques such as steganography also belong in this field, but encryption is the one that attracts the most attention for manipulating and protecting information.

I've always thought of Steganography as being completely separate from cryptography and in researching more online, it would appear that I'm not alone:

So... is the book incorrect? Or does Steganography fall under a broader category of Cryptography? That doesn't seem right to me...

  • 1
    I think that English is sloppy with this so, while I wouldn't say that the book is correct, I will say that it is not incorrect. – Neil Smithline Dec 29 '15 at 21:56
2

Steganography, first coined in 1499, does not technically require the use of a cipher or any calculations even though we primarily read about it now in the digital world.

https://en.wikipedia.org/wiki/Steganography

In his 1499 book Steganographia Johannes Trithemius discussed Steganography's advantage over cryptography and by doing so I would say his intent was to clearly differentiate it from the field of Cryptography.

https://en.wikipedia.org/wiki/Johannes_Trithemius#Steganographia

I do think this is one of those topics that goes back and forth fairly often but the general consensus I've seen is that Steganography is not part of cryptography and that it is uniquely separate.

Finally it does appear that Steganography may also be legal in countries which otherwise outlaw encryption.

Personally I would say both are used for forms of secure communications but are clearly different techniques.

BTW: It appears there is a copy of his original book on-line at the following URL

http://www.esotericarchives.com/tritheim/stegano.htm

1

Depending on the references, it seems that:

  • Either cryptography and steganography are two separate techniques,
  • Or that cryptography is a superset covering encryption and steganography.

In you question you link to Wikipedia's steganography page which seems to go toward the first possibility. However, on its side, Wikipedia's cryptography page seems to toward the second one:

Cryptography or cryptology; from Greek κρυπτός kryptós, "hidden, secret"; and γράφειν graphein, "writing", or -λογία -logia, "study", respectively is the practice and study of techniques for secure communication in the presence of third parties called adversaries. [...] Cryptography prior to the modern age was effectively synonymous with encryption, the conversion of information from a readable state to apparent nonsense.

Cryptography is a mean to hide information, and is not to be taken as a synonymous of encryption anymore.

But latter the same page pushes the discussion further by linking to RFC 2828, "Internet Security Glossary", which goes for the first possibility, clearly stating that steganography "is different than cryptography" and introduces cryptology as a superset which "sometimes is said to include steganography".

So, all-in-all, I think that the best answer one can give to your question is that sometimes it is, sometime it isn't. In fact, the more important to remember is that in English language this word may lead to confusion so you need to associate a clear context to it.

Here, you are in the context of an exam, so if this is the official position of the exam authorities regarding this (if there is any, it happens that book preparation authors may involuntary add some confusion by inserting their personal point of view in their book, that's why I prefer to rely at least on two different sources whenever possible for my own studies), you will have no choice but stick with it. Once you have passed the exam, you will be free to tell what made or made not sense in the exam cursus, but first thing first :).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.