4 ms·
I look forward to the day when one time pads are the norm for general encryption. A scifi novel I read, "A Deepness in the Sky" described how the pads themselv
by ColanR 7y ago
I look forward to the day when one time pads are the norm for general encryption.
A scifi novel I read, "A Deepness in the Sky" described how the pads themselves were a valuable item of trade. I don't think it's farfetched to imagine purchasing OTP data to use with internet browsing, the way we buy yubikeys to use with passwords. It would be a far simpler encryption scheme than those we currently use, and that simplicity would make it easier to catch bugs like heartbleed in the future.
How hard would it be to extend the ssl protocol to allow the use of OTP pads, where available?
- deleted 7y ago[deleted]
- ampdepolymerase 7y agoA variant of the OTP, the stream cipher, is already a core component of most cryptography protocols.
- brokenmachine 7y agoYou'd have to have a OTP of the same length as the data you want to send/receive. So your mobile phone for example would need to have local storage the same size as all the data you ever expected it to send/receive.
- ColanR 7y agoIs that farfetched? It's trivial if you have a 5GB / month plan.
- MarcScott 7y agoOne Time Pads are perfect, except for the rather crucial problem of key exchange. You have to meet your intended recipient irl at some point to exchange pads, and I don't fancy meeting up with every sysadmin who's server I want to access some HTML files from.
- ColanR 7y agoThat's the point of my second paragraph. The pads would be an item of trade. You buy an 'OTP yubikey' with 2GB of otp data for each of the top 50 websites, plug it in, and you're good for a month. The website spends 10k on a petabyte of otp data.
- brokenmachine 7y agoSo you can only securely access the top 50 websites, and need to go in person to buy the key. That sounds like a beyond ridiculous system. We can do better.