-----BEGIN PGP SIGNED MESSAGE-----
How about WWW one time pad servers? You browse to your favorite OTP server, which has a random number generator running in the background. You tell it to give you a block of X bytes, and mail it to persons 1, 2, 3, ... N.
These people then use this OTP for encrypting a document. It wouldn't be illegal because you aren't encoding any data and distributing it.. You're generating raw data. You wouldn't have to distribute any crypto software, you just xor your data file with the number of bytes that you were sent in the mail from the OTP server.. Enough of these things would be REALLY tough to monitor.. Plus, you could connect 8 different times and just pick one of the sets.. Or you could just use a portion of the set that you and the receiving party agreed upon.
Or, instead of using email, you could have a application/x-otp browser that would collect the OTP that the server sent out to you over HTTP. (this would be really hard to differentiate from other data if the server was doing other things at the same time).
Thoughts?
I think you're trusting the server a GREAT deal.
Doug Hughes Engineering Network Services doug@eng.auburn.edu Auburn University
-----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMAcXby1onm9OaF05AQEUpggApWiVdcA4UAsVIXKEor3JnM6PkEZleO6b CpbyXYVZNRmUuePTuUMf9KQkI0accFm/sjnc7t12Hujs60utILWYM2F71GSrHZ0/ POx/oExL5TgcR9m6e0cYM58k9xZT2golXXHukTXnU6FlCNSNMfWnBziTgsSwCj1q mZO8xQnbSWteWL50g7cFBMvGbyDSygOZu9MPqzRRvUVoF/kL78G0SAwT8HzGadfk yIV40wDicBfuPH1GcaPlbGW+0Adips0WHAETBSRmUXSBdu+uQcs6LhEhddvbKmzF Rh4qpIR0FYKcnyax0kqk6eBBWqo7oVCdm9nYMHc2yg6I9dQLGWnQIA== =b9lf -----END PGP SIGNATURE-----
On Fri, 14 Jul 1995, Black Unicorn wrote:
doug@eng.auburn.edu wrote:
How about WWW one time pad servers? You browse to your favorite OTP server, which has a random number generator running in the background. You tell it to give you a block of X bytes, and mail it to persons 1, 2, 3, ... N. [...] Thoughts?
I think you're trusting the server a GREAT deal.
A small addition to the protocol whereby the recipient gives the random data the once-over with a personal IDEA key would be sufficient to eliminate any doubts about the server. - Andy +-------------------------------------------------------------------------+ | Andrew Brown Internet <asb@nexor.co.uk> Telephone +44 115 952 0585 | | PGP (2048/9611055D): 69 AA EF 72 80 7A 63 3A C0 1F 9F 66 64 02 4C 88 | +-------------------------------------------------------------------------+
On Fri, 14 Jul 1995, Black Unicorn wrote:
How about WWW one time pad servers? You browse to your favorite OTP server, which has a random number generator running in the background. You tell it to give you a block of X bytes, and mail it to persons 1, 2, 3, ... N.
I think you're trusting the server a GREAT deal.
Why is that? The randomness of the data can be easily checked... -- Ed Carp, N7EKG Ed.Carp@linux.org, ecarp@netcom.com 801/534-8857 voicemail 801/460-1883 digital pager Finger ecarp@netcom.com for PGP 2.5 public key an88744@anon.penet.fi Q. What's the trouble with writing an MS-DOS program to emulate Clinton? A. Figuring out what to do with the other 639K of memory.
On Thu, 13 Jul 1995, Ed Carp [khijol Sysadmin] wrote:
On Fri, 14 Jul 1995, Black Unicorn wrote:
How about WWW one time pad servers? You browse to your favorite OTP server, which has a random number generator running in the background. You tell it to give you a block of X bytes, and mail it to persons 1, 2, 3, ... N.
I think you're trusting the server a GREAT deal.
Why is that? The randomness of the data can be easily checked...
Because if the server is compromised to KEEP the data that it mails to you and those other people, you can have a PERFECTLY random OTP, and because of the particulars of XOR, your communication has been compromised. Ben. ____ Ben Samman..............................................samman@cs.yale.edu I have learned silence from the talkative, toleration from the intolerant, and kindness from the unkind; yet, strange, I am ungrateful to those teachers.-- K. Gibran. SUPPORT THE PHIL ZIMMERMANN LEGAL DEFENSE FUND! For information Email: zldf@clark.net http://www.netresponse.com/zldf
participants (5)
-
Andy Brown -
Bob Snyder -
Ed Carp [khijol Sysadmin] -
Rev. Ben -
unicorn＠polaris.mindport.net