|
A new type of encryption for data security in a paranoid age Due to the depredations of the governments on our rights, specifically the right to silence and the right to privacy, traditional key-escrow and newer public-private key systems are limited. For instance, the UK government has now outlawed secrets. If asked by a police officer, you MUST hand over your encryption keys. If you refuse, or if you cannot PROVE you have forgotten or lost it/them, then you can be jailed for a long time. To combat this very real threat, new systems have already evolved. The use of a hotmail or other web-based email account is common to hide from spam or those who would seek to know who was sending the email they were getting (Spammers!). On a similar vein, how can any message be kept a secret if you must give your name and password to the authorities, on request, under penalty of law? Simple. Hide the data within other data. A new system called Publius came into being recently, which uses cryptographic techniques to encrypt and split a message, such that any one part is useless, and a minimum number is required to gain access. These parts are then mirrored to a number of sites, within various countries. If half of the servers were shut down, the message could still be fully recovered, but no one server holds even half of the total message. This frees the server owner from any threat of his server being confiscated due to content on it, as nothing on his server can even be read! Now, steganography, the technique of burying encrypted text in other files, such as pictures, in order to disguise the fact confidential messages are been exchanged, is almost as old as cryptography itself. However my system is a little different. I propose a new system which is the inverse of Publius. You take your data, and the program (we shall call it Secrius) encrypts it. However, it takes each file of your data, and combines them together. A different password would be used for each file contained in the data block. By combining an innocent text file with your memoirs, or a bitmap of your countries flag with your accounts, you would have one file with two passwords. Decryption with one password would provide no indication of the content, or even existance, of the other files. When someone threatens you to give your password, you can give one. This will 'prove' the file is innocent. Since it is impossible to know how many files and passwords there are for any given file, a search of every possible key phrase would be required to prove there was nothing of dubious content. This would be impractical. Even if it were not, some huge number of the results from any set of files would return bomb threats and intrigue. Liken the process to a very simple code. From the start of this paragraph, 16, 9, 11, 7, 6, 2, gives 'secret', whereas 14, 1, 4, 22, 12, gives 'cLear'. The first code is continuous, in that you continue from where you just got the last character from, and the second restarts from the start of the paragraph each time. It can be seen that any arbitary word or phrase can be created. With compression and encryption this would result in a system that was almost unstoppable. For example, a short message could be sent, containing this 'signature', and it could be applied to a standard text file, with the password, inside Securius, to generate a message. A more secure way would be to combine the two so that almost any message could be constructed if a password was entered. This would mean there was no 'right' or 'wrong' password, but you would get the wrong message with the wrong password! This would ensure the privacy of your personal data, if a number of usefully long passwords were used, even if you or your data files were tortured! UPDATE: The internet now has a new way to hide your message inside the pointless, annoying spam that you get! www.spammimic.com does just that. Try it out on the message below. Just go to "decode". <Cut Below here> Dear Friend , We know you are interested in receiving <Ends> This is a fairly good encryption engine, since changing one character will change the resulting message quite a lot. Obviously, it is limited since it still has to look like spam! Back to Index |
The rubbertreeplant website (www.rubbertreeplant.co.uk) is Copyright 2000-2002 Nigel Tolley, unless otherwise stated. Articles from external sources used under "Fair Use", with external links intact where possible. Re-use by prior permission only, excepting "Fair Use", where originators authorship/reference information and copyright must be maintained. Email to nigel@rubbertreeplant.co.uk