3 ms·
Not again! Your OTP is extremely sensitive to the quality of randomness and requires a lot of it - which makes things very difficult. It provides no authentic
by eeZah7Ux 9y ago
Not again!
Your OTP is extremely sensitive to the quality of randomness and requires a lot of it - which makes things very difficult.
It provides no authenticity and integrity or at least proof of tampering.
It does not protect from message reordering and capture+retransmission.
It obviously leaks metadata in a real-world usage: sender, receiver, msg length, time of message.
- falcolas 9y agoAll of these problems are present with any pure encryption method. That's why authentication hashes, message ids, high quality randomness sources, and so forth exist. OTP can use these just as well as any other encryption method.
- irundebian 9y agoWhat do you mean by "pure encryption method"? No one (no smart people) uses AES purely, but of course in some mode of operation such as GCM which provides integrity.
- deleted 9y ago[deleted]
- eeZah7Ux 9y agoThe question was about secure communication, not just "pure" encryption.