Questions tagged [one-time-pad]

A one-time pad is an encryption method that uses a key (the pad) that is as long as the message. It provides perfect secrecy but at the cost of having as much key data as payload. Not to be confused with one-time passwords.

Filter by
Sorted by
Tagged with
1 vote
1 answer
117 views

How to break poorly implemented One-Time-Pad

I have a cipher text, that was created using One-Time-Pad, but the idea is that it was encrypted badly. The message, a section of a book, was encrypted using a pad 256B long repeated many times over (...
Magpie's user avatar
  • 11
-1 votes
1 answer
88 views

How to increase the security of One-Time Pad algorithm? [closed]

Is there any ways to increase the security of One Time Pad algorithm? We required to make a write up on how to increase the security of classical cryptography algorithm. In this case, we are choosing ...
A01's user avatar
  • 1
0 votes
2 answers
183 views

Can a one-time pad prevent a meet-in-the-middle attack?

I am confused regarding this: I am working on a project but I want to use a one-time pad and want to launch a meet-in-the-middle attack on my new scheme for data security. As block ciphers are ...
user282299's user avatar
30 votes
3 answers
5k views

Why is one-time pad informationally secure?

I am reading "Serious cryptography" and he wrote the following: Informational security is based not on how hard it is to break a cipher, but whether it’s conceivable to break it at all. A ...
YozNacks's user avatar
  • 403
5 votes
2 answers
2k views

Attack against OTP Cipher [closed]

What would be an attack against an insecure instance of the OTP cipher given two challenge ciphertexts using the same key in order to get the plaintext? I've tried to implement some approaches with ...
Coga's user avatar
  • 69
2 votes
2 answers
252 views

What wrong with this system to proactively check if customers' passwords have been found in a breach?

Let's say that during account creation, I already prohibit passwords known to be reused from breaches of other sites, like if it's in the Have I Been Pwned list. But breaches happen all the time, so ...
Han Seoul-Oh's user avatar
2 votes
1 answer
112 views

What method to compress English by hand has the highest compression ratio? [closed]

Solitaire is a method for encrypting messages by hand. Reading it though, the only advantage the Solitaire has over a one time pad is that it can encrypt longer messages. It requires a new, random key ...
PyRulez's user avatar
  • 2,937
1 vote
2 answers
489 views

How is secure for OTP implementation to use pages smaller than the payload?

I am wondering how is should i implement one-time pad encryption in my code. I use 16-byte pages at the moment, and the implementation in Golang from the page: https://github.com/ryanuber/go-otp/blob/...
Tany's user avatar
  • 19
0 votes
1 answer
670 views

Using a manual cipher to secure Two Factor Authentication (2FA) backup codes [duplicate]

Most accounts with two factor authentication (2FA) provide you with backup codes to use in case your phone is lost or stolen. For example, Google provides a list of 10 backup codes when setting up 2FA....
Justin J Stark's user avatar
-1 votes
1 answer
281 views

For which key length (as a function of file size) is a XOR cipher considered as safe?

It is well-known that, doing a XOR of a file against a short key is highly insecure encryption (can be broken with frequency analysis). But if the length of the key is equal to (or has same order of ...
Basj's user avatar
  • 963
2 votes
3 answers
406 views

Is it practicable to use font to visually decrypt ciphertext [closed]

The aim is to avoid article easily copied by Web crawlers. Cipher the text with a substitute cipher. Generate a font that counteracts the substitution and transfer to Web front-end. (This works by ...
Donald Wu's user avatar
0 votes
4 answers
192 views

Using one-time-pads require list of used ones?

I read that because the Soviets weren't careful enough with their one-time-pads, by unintentionally reusing some, they allowed the West to break their encrypted communication. Does this mean that ...
Lee's user avatar
  • 101
1 vote
2 answers
365 views

Is this voting system secure in an information theory sense?

This is the question that I am trying to create a voting system for, and I wanted to submit it for belittlement. It's a remote voting system, and our voters need to show evidence they supported the ...
daniel's user avatar
  • 774
2 votes
1 answer
391 views

How can I decode a message that was encrypted with a one-time pad if I have the key?

Can I decode a message that was encrypted with a one-time pad if I have the key used to encrypt it? If so, how?
TechDinoKing's user avatar
0 votes
0 answers
78 views

Practical usage of One Time Pad? [duplicate]

The One Time Pad (OTP) encryption is considered as a perfect cryptography. But what are the practical usages that we have with OTP? It would be great if someone can explain how we can practically use ...
user3496510's user avatar
  • 1,287
-3 votes
2 answers
260 views

Is HJXDDUDAYIZQRFGSJJ a valid one-time pad encryption of WESTERNENGINEERING? [closed]

How we can check this is valid or not? As I know in one time pad, we have key to make cipher text from plain-text. WESTERNENGINEERING HJXDDUDAYIZQRFGSJJ
Vikram Pal's user avatar
2 votes
2 answers
520 views

One Time Pad Algorithm without sharing keys

On my walk to work today I thought of the following encryption algorithm and could not determine the flaw. It uses one time pad's that don't need to be shared and has a Diffie-Hellman key exchange ...
wcochran's user avatar
  • 135
77 votes
10 answers
10k views

Why even use a one-time pad if the key distribution is fully secured?

I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough". ...
Riley Willow's user avatar
  • 1,139
-4 votes
1 answer
323 views

One-Time-Pad Decryption [closed]

For homework, I have a ciphertext which is 582 chars long. The OTP used was reused over and over. The OTP is 50 chars long. How exactly can I now get the key and the cleartext?
Thomas's user avatar
  • 11
4 votes
1 answer
296 views

Infinite one time pads, brute force multiple pads?

So based on my understanding using the same key for encrypting two completely random plain texts when using an otp cipher will still retain perfectly secret. This is based on the answers on this ...
5hammer's user avatar
  • 71
3 votes
1 answer
492 views

What are the problems of using OTP encryption with TRNG?

I've programmed a simple One-Time Pad "encryptor" that can merge two files into one by using bitwise XOR. The pseudo-random key files are generated by using the CryptGenRandom() function from ...
Log's user avatar
  • 33
-2 votes
2 answers
6k views

Is One-Time pad used anywhere?

One-time pad is a method where you XOR plaintext with the key. If the key is be random and not used more than one then the one-time pad is unbreakable. Another advantage is easy implementation. ...
Tero Lahtinen's user avatar
-1 votes
1 answer
240 views

Unconditionally Secure Authentication

I'm trying to add the authentication for my One-Time Pad implementation. I know that to provide Unconditionally Secure Authentication I need to use the One-Time MAC authentication. But I don't ...
Riccardo Leschiutta's user avatar
1 vote
2 answers
436 views

One-Time Pad authentication & Information-theoretic security

I'm trying to create a "Information Theoretically Secure" cryptosystem, inspired on the One-Time Pad. Now I'm facing the obstacle of authentication... How good is this solution (that uses the "Encrypt ...
Riccardo Leschiutta's user avatar
3 votes
2 answers
430 views

Can this modified 'Many' Time Pad be made 'stronger' by using an extrememly long key?

Starting with a one time pad say you want to encrypt some small strings like the words in this sentence but you want to reuse the same OTP key for each string so that when you encounter the same word ...
erotavlas's user avatar
  • 133
29 votes
7 answers
10k views

Can you say that since one time pad encryption is unbreakable, it is the best if used properly?

I'm currently reading about one time pad encryption, and I have a question. They say OTP encryption is unbreakable, and this can be proved mathematically. This is provided that the key used is truly ...
Saoud's user avatar
  • 407
0 votes
1 answer
701 views

How does a keyfile work?

I was looking at some code on codereview that is far out of my league of understanding and just screwing around, but it raised a question. This program (along with many other encryption programs, i ...
user66104's user avatar
7 votes
4 answers
7k views

Best practices for usefully storing two factor authentication backup codes?

For a lot of web services offering two factor authentication, after setting up the system, you are given a short list of backup codes (one-time pads) that are around 7-10 characters long. These are ...
0d0h0m0s's user avatar
1 vote
1 answer
315 views

How to cryptoanalyze a one time pad that uses a plain text document as the pad?

I have read that in order for a one time pad to be truly secure, the pad itself must be random data. Given the practical difficulty of sharing a secure random pad, I was wondering what would be the ...
Walter Anderson's user avatar
2 votes
4 answers
1k views

Is breaking a looping one-time pad practical? If so, how?

A one-time pad is known to be theoritcally secure, nothing can break it. However, if the key is reused, the one time pad becomes theoritically breakable. But even RSA is theorically breakable yet it'...
Hello World's user avatar
3 votes
1 answer
387 views

How to fix this broken crypto protocol?

I am considering a protocol where you upload a one time pad to a server, using public key encryption and then the result (using the pad) is sent back in plaintext: Alice uses Bobs RSA public key to ...
emberfang's user avatar
  • 199
3 votes
5 answers
6k views

Advantages of one time pad

I always hear that one time pad'ing something is so great because you won't know if you've successfully decrypted the data. I understand the idea that you can XOR any bits just the same as any other ...
tau's user avatar
  • 407
22 votes
9 answers
7k views

Are there any systems out there that use a one-time pad?

I'm still new to information security, but I have read a bit about the one-time pad. The point that sticks out to me the most is that it is supposedly unbreakable. Has this method of encryption ever ...
rackonnoiter's user avatar
0 votes
1 answer
154 views

How strong is this encryption? [closed]

Given Dictionary containing 1000 three-letter words: dictionary=abc,def,ghi,jkl,mno,pqr... Randomly chosen words from the dictionary: 10-bits-passwords=abc,def,ghi Randomly chosen three words from ...
user3253477's user avatar
5 votes
1 answer
19k views

How to Encrypt Credit Card number for storing it in sql server database according to PCI DSS Requirement?

According to PCI-DSS 3.4 Requirement: Render PAN unreadable anywhere it is stored by using the below methods: One-way hash Truncation Index tokens and pads Strong cryptography with associated key-...
RajeshKannan's user avatar
5 votes
3 answers
3k views

How to use one time pad if the key is shorter than the plaintext?

I understand that one of the requirements (and a major drawback) of OTP is that the key has to be as long as the message is. What happens if I have a key that is shorter? The message would only get ...
user avatar
4 votes
2 answers
1k views

What is ("ASCII" redundancy) which is said to be required to retrieve the original plain text in 2 times pad?

Sorry for the long title :$ In a video speaking about attacks on the one time pad which uses psudorandom generators (PRG), It's said that Eve can retrieve the plain text of 2 messages that have been ...
HSN's user avatar
  • 1,218
0 votes
2 answers
845 views

An attempt to overcome the key distribution problem inherent in one time pad cryptography

After reading about the 'imminent cryptocalypse' etc, I started thinking about a cryptographic protocol that would not depend on complexity of mathematical operations (e.g. factorisation, discrete ...
user29473's user avatar
0 votes
3 answers
1k views

Is using a numbers station to transmit a one-time-pad as key actually insecure?

We all know the two most important problems related to a “one-time-pad”: The one-time-pad needs to be truly random (which I think is logic, as pseudo random generators are quick but predictable). ...
e-sushi's user avatar
  • 1,286
7 votes
2 answers
33k views

Decrypt cipher texts encypted with the same one time pad key

I have two pieces of ciphertext encrypted with a stream cipher using the same key. How do I recover the plaintext of both ciphertext messages without knowing the key used?
Alan Coromano's user avatar
6 votes
2 answers
2k views

Why is using a pseudo-random key considered more practical than a one-time pad?

I am experiencing confusion regarding one-time pads. I have read that a one-time pad generates a key that has the same length as the plaintext. This is considered to be an overhead in sharing such a ...
Humam Shbib's user avatar