The Dutch government recently passed a new law: Sleepnet (EN: Dragnet) and got it through both parliament and senate mostly unchanged.
The Sleepnet-law allows government-entities like intelligence-agencies and law-enforcement to legally mass-intercept/-collect and -store ALL communications of entire populations (neighbourhoods/cities/country?), without the need for a specific target/suspect.
So to our government, we're now all, by default, regarded as suspects…
This inspired me to come up with an 'encryption scheme' that, in addition to hiding the contained message from unauthorized eyes, also attempts to exhaust all resources of any system that is required to make something like the Sleepnet law possible.
I'm thinking of hiding the encrypted message (e.g an email) inside a large (>100MB?) blob of random data, which is possibly itself encrypted again. So sending a 40KB encrypted email, becomes sending >100MB of bogus data, which possibly carries some encrypted message inside.
If such a scheme would be adopted by large numbers of people, any Sleepnet-like setup will quickly fall to its knees due to too much data and too few resources (storage/cpu). At least, that's what I'm hoping.
Would a scheme like this be feasible? Could it work at all? What would be required to make it work?
I'm aware of the impact such scheme would have on infrastructure, networks, ISP's and server-hosting companies, but please let's forget about that for now… Right now, I'm only interested in if it is possible at all and what is required technically to create something like this.
And of course, I'd also like to know of any already existing system that uses a similar approach.
This idea is specifically not concerned with the gathering and correlating of metadata, which will not be affected by a strategy as described above. Also, in the Netherlands, ISP's and Telecom providers are already obliged to retain this metadata for (I believe) 3 years.