Questions tagged [one-time-pad]
A one-time pad is an encryption method that uses a key (the pad) that is as long as the message. It provides perfect secrecy but at the cost of having as much key data as payload. Not to be confused with one-time passwords.
39
questions
0
votes
2
answers
142
views
Can a one-time pad prevent a meet-in-the-middle attack?
I am confused regarding this: I am working on a project but I want to use a one-time pad and want to launch a meet-in-the-middle attack on my new scheme for data security. As block ciphers are ...
30
votes
3
answers
5k
views
Why is one-time pad informationally secure?
I am reading "Serious cryptography" and he wrote the following:
Informational security is based not on how hard it is to break a cipher,
but whether it’s conceivable to break it at all. A ...
- 403
5
votes
2
answers
2k
views
Attack against OTP Cipher [closed]
What would be an attack against an insecure instance of the OTP cipher given two challenge ciphertexts using the same key in order to get the plaintext? I've tried to implement some approaches with ...
- 69
2
votes
2
answers
243
views
What wrong with this system to proactively check if customers' passwords have been found in a breach?
Let's say that during account creation, I already prohibit passwords known to be reused from breaches of other sites, like if it's in the Have I Been Pwned list. But breaches happen all the time, so ...
- 121
2
votes
1
answer
106
views
What method to compress English by hand has the highest compression ratio? [closed]
Solitaire is a method for encrypting messages by hand. Reading it though, the only advantage the Solitaire has over a one time pad is that it can encrypt longer messages. It requires a new, random key ...
- 2,937
1
vote
2
answers
482
views
How is secure for OTP implementation to use pages smaller than the payload?
I am wondering how is should i implement one-time pad encryption in my code.
I use 16-byte pages at the moment, and the implementation in Golang from the page: https://github.com/ryanuber/go-otp/blob/...
- 19
0
votes
1
answer
561
views
Using a manual cipher to secure Two Factor Authentication (2FA) backup codes [duplicate]
Most accounts with two factor authentication (2FA) provide you with backup codes to use in case your phone is lost or stolen. For example, Google provides a list of 10 backup codes when setting up 2FA....
- 151
-1
votes
1
answer
245
views
For which key length (as a function of file size) is a XOR cipher considered as safe?
It is well-known that, doing a XOR of a file against a short key is highly insecure encryption (can be broken with frequency analysis).
But if the length of the key is equal to (or has same order of ...
- 951
2
votes
3
answers
356
views
Is it practicable to use font to visually decrypt ciphertext [closed]
The aim is to avoid article easily copied by Web crawlers.
Cipher the text with a substitute cipher.
Generate a font that counteracts the substitution and transfer to Web front-end. (This works by ...
- 21
0
votes
4
answers
187
views
Using one-time-pads require list of used ones?
I read that because the Soviets weren't careful enough with their one-time-pads, by unintentionally reusing some, they allowed the West to break their encrypted communication.
Does this mean that ...
- 101
1
vote
2
answers
356
views
Is this voting system secure in an information theory sense?
This is the question that I am trying to create a voting system for, and I wanted to submit it for belittlement.
It's a remote voting system, and our voters need to show evidence they supported the ...
- 774
2
votes
1
answer
362
views
How can I decode a message that was encrypted with a one-time pad if I have the key?
Can I decode a message that was encrypted with a one-time pad if I have the key used to encrypt it? If so, how?
- 23
0
votes
0
answers
78
views
Practical usage of One Time Pad? [duplicate]
The One Time Pad (OTP) encryption is considered as a perfect cryptography. But what are the practical usages that we have with OTP? It would be great if someone can explain how we can practically use ...
- 1,277
-3
votes
2
answers
254
views
Is HJXDDUDAYIZQRFGSJJ a valid one-time pad encryption of WESTERNENGINEERING? [closed]
How we can check this is valid or not?
As I know in one time pad, we have key to make cipher text from plain-text.
WESTERNENGINEERING
HJXDDUDAYIZQRFGSJJ
- 43
2
votes
2
answers
502
views
One Time Pad Algorithm without sharing keys
On my walk to work today I thought of the following encryption algorithm and could not determine the flaw. It uses one time pad's that don't need to be shared and has a Diffie-Hellman key exchange ...
- 135
77
votes
10
answers
10k
views
Why even use a one-time pad if the key distribution is fully secured?
I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough".
...
- 1,129
-4
votes
1
answer
318
views
One-Time-Pad Decryption [closed]
For homework, I have a ciphertext which is 582 chars long. The OTP used was reused over and over. The OTP is 50 chars long.
How exactly can I now get the key and the cleartext?
- 11
4
votes
1
answer
279
views
Infinite one time pads, brute force multiple pads?
So based on my understanding using the same key for encrypting
two completely random plain texts when using an otp cipher will still retain perfectly secret. This is based on the answers on this ...
- 71
3
votes
1
answer
471
views
What are the problems of using OTP encryption with TRNG?
I've programmed a simple One-Time Pad "encryptor" that can merge two files into one by using bitwise XOR.
The pseudo-random key files are generated by using the CryptGenRandom() function from ...
- 33
-2
votes
2
answers
6k
views
Is One-Time pad used anywhere?
One-time pad is a method where you XOR plaintext with the key. If the key is be random and not used more than one then the one-time pad is unbreakable. Another advantage is easy implementation. ...
- 267
-1
votes
1
answer
231
views
Unconditionally Secure Authentication
I'm trying to add the authentication for my One-Time Pad implementation.
I know that to provide Unconditionally Secure Authentication I need to use the One-Time MAC authentication.
But I don't ...
1
vote
2
answers
426
views
One-Time Pad authentication & Information-theoretic security
I'm trying to create a "Information Theoretically Secure" cryptosystem, inspired on the One-Time Pad.
Now I'm facing the obstacle of authentication...
How good is this solution (that uses the "Encrypt ...
3
votes
2
answers
423
views
Can this modified 'Many' Time Pad be made 'stronger' by using an extrememly long key?
Starting with a one time pad say you want to encrypt some small strings like the words in this sentence but you want to reuse the same OTP key for each string so that when you encounter the same word ...
- 133
29
votes
7
answers
10k
views
Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
I'm currently reading about one time pad encryption, and I have a question. They say OTP encryption is unbreakable, and this can be proved mathematically. This is provided that the key used is truly ...
- 407
0
votes
1
answer
675
views
How does a keyfile work?
I was looking at some code on codereview that is far out of my league of understanding and just screwing around, but it raised a question.
This program (along with many other encryption programs, i ...
7
votes
4
answers
6k
views
Best practices for usefully storing two factor authentication backup codes?
For a lot of web services offering two factor authentication, after setting up the system, you are given a short list of backup codes (one-time pads) that are around 7-10 characters long. These are ...
- 81
1
vote
1
answer
307
views
How to cryptoanalyze a one time pad that uses a plain text document as the pad?
I have read that in order for a one time pad to be truly secure, the pad itself must be random data. Given the practical difficulty of sharing a secure random pad, I was wondering what would be the ...
2
votes
4
answers
1k
views
Is breaking a looping one-time pad practical? If so, how?
A one-time pad is known to be theoritcally secure, nothing can break it. However, if the key is reused, the one time pad becomes theoritically breakable.
But even RSA is theorically breakable yet it'...
- 242
3
votes
1
answer
380
views
How to fix this broken crypto protocol?
I am considering a protocol where you upload a one time pad to a server, using public key encryption and then the result (using the pad) is sent back in plaintext:
Alice uses Bobs RSA public key to ...
- 199
3
votes
5
answers
6k
views
Advantages of one time pad
I always hear that one time pad'ing something is so great because you won't know if you've successfully decrypted the data. I understand the idea that you can XOR any bits just the same as any other ...
- 397
22
votes
9
answers
6k
views
Are there any systems out there that use a one-time pad?
I'm still new to information security, but I have read a bit about the one-time pad. The point that sticks out to me the most is that it is supposedly unbreakable. Has this method of encryption ever ...
- 339
0
votes
1
answer
148
views
How strong is this encryption? [closed]
Given
Dictionary containing 1000 three-letter words:
dictionary=abc,def,ghi,jkl,mno,pqr...
Randomly chosen words from the dictionary:
10-bits-passwords=abc,def,ghi
Randomly chosen three words from ...
5
votes
1
answer
19k
views
How to Encrypt Credit Card number for storing it in sql server database according to PCI DSS Requirement?
According to PCI-DSS 3.4 Requirement:
Render PAN unreadable anywhere it is stored by using the below methods:
One-way hash
Truncation
Index tokens and pads
Strong cryptography with associated key-...
- 605
5
votes
3
answers
2k
views
How to use one time pad if the key is shorter than the plaintext?
I understand that one of the requirements (and a major drawback) of OTP is that the key has to be as long as the message is.
What happens if I have a key that is shorter? The message would only get ...
user34483
3
votes
2
answers
1k
views
What is ("ASCII" redundancy) which is said to be required to retrieve the original plain text in 2 times pad?
Sorry for the long title :$
In a video speaking about attacks on the one time pad which uses psudorandom generators (PRG),
It's said that Eve can retrieve the plain text of 2 messages that have been ...
- 1,198
0
votes
2
answers
839
views
An attempt to overcome the key distribution problem inherent in one time pad cryptography
After reading about the 'imminent cryptocalypse' etc, I started thinking about a cryptographic protocol that would not depend on complexity of mathematical operations (e.g. factorisation, discrete ...
- 19
0
votes
3
answers
1k
views
Is using a numbers station to transmit a one-time-pad as key actually insecure?
We all know the two most important problems related to a “one-time-pad”:
The one-time-pad needs to be truly random (which I think is logic, as pseudo random generators are quick but predictable).
...
- 1,286
7
votes
2
answers
32k
views
Decrypt cipher texts encypted with the same one time pad key
I have two pieces of ciphertext encrypted with a stream cipher using the same key.
How do I recover the plaintext of both ciphertext messages without knowing the key used?
- 183
6
votes
2
answers
2k
views
Why is using a pseudo-random key considered more practical than a one-time pad?
I am experiencing confusion regarding one-time pads. I have read that a one-time pad generates a key that has the same length as the plaintext. This is considered to be an overhead in sharing such a ...
- 171