Questions tagged [one-time-pad]

A one-time pad is an encryption method that uses a key (the pad) that is as long as the message. It provides perfect secrecy but at the cost of having as much key data as payload. Not to be confused with one-time passwords.

Filter by
Sorted by
Tagged with
2
votes
1answer
57 views

What method to compress English by hand has the highest compression ratio? [closed]

Solitaire is a method for encrypting messages by hand. Reading it though, the only advantage the Solitaire has over a one time pad is that it can encrypt longer messages. It requires a new, random key ...
1
vote
2answers
422 views

How is secure for OTP implementation to use pages smaller than the payload?

I am wondering how is should i implement one-time pad encryption in my code. I use 16-byte pages at the moment, and the implementation in Golang from the page: https://github.com/ryanuber/go-otp/blob/...
0
votes
1answer
193 views

Using a manual cipher to secure Two Factor Authentication (2FA) backup codes [duplicate]

Most accounts with two factor authentication (2FA) provide you with backup codes to use in case your phone is lost or stolen. For example, Google provides a list of 10 backup codes when setting up 2FA....
-1
votes
1answer
98 views

For which key length (as a function of file size) is a XOR cipher considered as safe?

It is well-known that, doing a XOR of a file against a short key is highly insecure encryption (can be broken with frequency analysis). But if the length of the key is equal to (or has same order of ...
2
votes
3answers
186 views

Is it practicable to use font to visually decrypt ciphertext [closed]

The aim is to avoid article easily copied by Web crawlers. Cipher the text with a substitute cipher. Generate a font that counteracts the substitution and transfer to Web front-end. (This works by ...
0
votes
4answers
117 views

Using one-time-pads require list of used ones?

I read that because the Soviets weren't careful enough with their one-time-pads, by unintentionally reusing some, they allowed the West to break their encrypted communication. Does this mean that ...
1
vote
2answers
279 views

Is this voting system secure in an information theory sense?

This is the question that I am trying to create a voting system for, and I wanted to submit it for belittlement. It's a remote voting system, and our voters need to show evidence they supported the ...
2
votes
1answer
205 views

How can I decode a message that was encrypted with a one-time pad if I have the key?

Can I decode a message that was encrypted with a one-time pad if I have the key used to encrypt it? If so, how?
0
votes
0answers
70 views

Practical usage of One Time Pad? [duplicate]

The One Time Pad (OTP) encryption is considered as a perfect cryptography. But what are the practical usages that we have with OTP? It would be great if someone can explain how we can practically use ...
-3
votes
2answers
155 views

Is HJXDDUDAYIZQRFGSJJ a valid one-time pad encryption of WESTERNENGINEERING? [closed]

How we can check this is valid or not? As I know in one time pad, we have key to make cipher text from plain-text. WESTERNENGINEERING HJXDDUDAYIZQRFGSJJ
2
votes
2answers
325 views

One Time Pad Algorithm without sharing keys

On my walk to work today I thought of the following encryption algorithm and could not determine the flaw. It uses one time pad's that don't need to be shared and has a Diffie-Hellman key exchange ...
78
votes
10answers
9k views

Why even use a one-time pad if the key distribution is fully secured?

I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough". ...
-4
votes
1answer
171 views

One-Time-Pad Decryption [closed]

For homework, I have a ciphertext which is 582 chars long. The OTP used was reused over and over. The OTP is 50 chars long. How exactly can I now get the key and the cleartext?
4
votes
1answer
170 views

Infinite one time pads, brute force multiple pads?

So based on my understanding using the same key for encrypting two completely random plain texts when using an otp cipher will still retain perfectly secret. This is based on the answers on this ...
3
votes
1answer
231 views

What are the problems of using OTP encryption with TRNG?

I've programmed a simple One-Time Pad "encryptor" that can merge two files into one by using bitwise XOR. The pseudo-random key files are generated by using the CryptGenRandom() function from ...
-3
votes
2answers
3k views

Is One-Time pad used anywhere?

One-time pad is a method where you XOR plaintext with the key. If the key is be random and not used more than one then the one-time pad is unbreakable. Another advantage is easy implementation. ...
-1
votes
1answer
137 views

Unconditionally Secure Authentication

I'm trying to add the authentication for my One-Time Pad implementation. I know that to provide Unconditionally Secure Authentication I need to use the One-Time MAC authentication. But I don't ...
1
vote
2answers
299 views

One-Time Pad authentication & Information-theoretic security

I'm trying to create a "Information Theoretically Secure" cryptosystem, inspired on the One-Time Pad. Now I'm facing the obstacle of authentication... How good is this solution (that uses the "Encrypt ...
3
votes
2answers
368 views

Can this modified 'Many' Time Pad be made 'stronger' by using an extrememly long key?

Starting with a one time pad say you want to encrypt some small strings like the words in this sentence but you want to reuse the same OTP key for each string so that when you encounter the same word ...
30
votes
7answers
10k views

Can you say that since one time pad encryption is unbreakable, it is the best if used properly?

I'm currently reading about one time pad encryption, and I have a question. They say OTP encryption is unbreakable, and this can be proved mathematically. This is provided that the key used is truly ...
0
votes
1answer
461 views

How does a keyfile work?

I was looking at some code on codereview that is far out of my league of understanding and just screwing around, but it raised a question. This program (along with many other encryption programs, i ...
6
votes
4answers
3k views

Best practices for usefully storing two factor authentication backup codes?

For a lot of web services offering two factor authentication, after setting up the system, you are given a short list of backup codes (one-time pads) that are around 7-10 characters long. These are ...
1
vote
1answer
234 views

How to cryptoanalyze a one time pad that uses a plain text document as the pad?

I have read that in order for a one time pad to be truly secure, the pad itself must be random data. Given the practical difficulty of sharing a secure random pad, I was wondering what would be the ...
2
votes
4answers
811 views

Is breaking a looping one-time pad practical? If so, how?

A one-time pad is known to be theoritcally secure, nothing can break it. However, if the key is reused, the one time pad becomes theoritically breakable. But even RSA is theorically breakable yet it'...
3
votes
1answer
300 views

How to fix this broken crypto protocol?

I am considering a protocol where you upload a one time pad to a server, using public key encryption and then the result (using the pad) is sent back in plaintext: Alice uses Bobs RSA public key to ...
4
votes
5answers
4k views

Advantages of one time pad

I always hear that one time pad'ing something is so great because you won't know if you've successfully decrypted the data. I understand the idea that you can XOR any bits just the same as any other ...
22
votes
9answers
6k views

Are there any systems out there that use a one-time pad?

I'm still new to information security, but I have read a bit about the one-time pad. The point that sticks out to me the most is that it is supposedly unbreakable. Has this method of encryption ever ...
0
votes
1answer
110 views

How strong is this encryption? [closed]

Given Dictionary containing 1000 three-letter words: dictionary=abc,def,ghi,jkl,mno,pqr... Randomly chosen words from the dictionary: 10-bits-passwords=abc,def,ghi Randomly chosen three words from ...
4
votes
1answer
18k views

How to Encrypt Credit Card number for storing it in sql server database according to PCI DSS Requirement?

According to PCI-DSS 3.4 Requirement: Render PAN unreadable anywhere it is stored by using the below methods: One-way hash Truncation Index tokens and pads Strong cryptography with associated key-...
5
votes
2answers
1k views

How to use one time pad if the key is shorter than the plaintext?

I understand that one of the requirements (and a major drawback) of OTP is that the key has to be as long as the message is. What happens if I have a key that is shorter? The message would only get ...
3
votes
2answers
903 views

What is (“ASCII” redundancy) which is said to be required to retrieve the original plain text in 2 times pad?

Sorry for the long title :$ In a video speaking about attacks on the one time pad which uses psudorandom generators (PRG), It's said that Eve can retrieve the plain text of 2 messages that have been ...
0
votes
2answers
776 views

An attempt to overcome the key distribution problem inherent in one time pad cryptography

After reading about the 'imminent cryptocalypse' etc, I started thinking about a cryptographic protocol that would not depend on complexity of mathematical operations (e.g. factorisation, discrete ...
0
votes
3answers
1k views

Is using a numbers station to transmit a one-time-pad as key actually insecure?

We all know the two most important problems related to a “one-time-pad”: The one-time-pad needs to be truly random (which I think is logic, as pseudo random generators are quick but predictable). ...
6
votes
2answers
24k views

Decrypt cipher texts encypted with the same one time pad key

I have two pieces of ciphertext encrypted with a stream cipher using the same key. How do I recover the plaintext of both ciphertext messages without knowing the key used?
6
votes
2answers
2k views

Why is using a pseudo-random key considered more practical than a one-time pad?

I am experiencing confusion regarding one-time pads. I have read that a one-time pad generates a key that has the same length as the plaintext. This is considered to be an overhead in sharing such a ...