3 ms·

Military crypto systems have rarely been based around one-time pads. One time pads are difficult to use and extremely slow in practice because you have to work

Military crypto systems have rarely been based around one-time pads. One time pads are difficult to use and extremely slow in practice because you have to work by hand to decrypt a message. A cipher machine is hard to make mistakes with and can disseminate information quickly in both directions. That's why you don't load up ships with hundreds of pages of OTPs, you put an Enigma (or modern equivalent ;)) on board. One time pads are useful for espionage, and you can see examples of how they are used here[1]. They took advantage of how most espionage worked (and who knows, may still work!): different channels for sending and receiving. The numbers station read you a short message, and if you needed to send a message back you signaled your handler to meet in person at a prearranged place. The same thing that makes OTPs suck on ships make them excellent for sending short messages to spies. You can't hide an Enigma in a walnut, after all! [1]: https://www.cryptomuseum.com/crypto/otp/index.htm https://www.cryptomuseum.com/crypto/otp/index.htm

Mvandenbergh 6y ago
Also worth noting that most military communications are only sensitive if broken quickly, secret messages sent in espionage might need to stay secret for decades against potentially new mathematical attacks and hardware developments.
jandrese 6y ago
One time pads don't necessarily have to be pen and paper. You can distribute a MicroSD card with 128GB of random bits that is used to encode/decode messages. An additional advantage of a system like this is the OTP can be encrypted so if it is captured it can't be used to decrypt old messages without further getting key material from the end user (possibly with a pipe wrench). The biggest problem is that no matter what, the OTP ends up being some sort of physical medium that requires shipping to the end user. But really it's a scaled up version of the key distribution problem.
- 35fbe7d3d5b9 6y ago
  > An additional advantage of a system like this is the OTP can be encrypted so if it is captured it can't be used to decrypt old messages without further getting key material from the end user (possibly with a pipe wrench). That problem has already been solved and the websites you visit today (should!) be working the same way: https://en.wikipedia.org/wiki/Forward_secrecy https://en.wikipedia.org/wiki/Forward_secrecy > the key distribution problem That is the hardest problem, especially in a system where you've got military units in unfriendly areas.
  - mikewarot 6y ago
    Erasing the parts of the pad that have already been used, overwriting them with new hardware generated random numbers would seem to help out forward secrecy. Or am I missing something?
todd8 6y ago
One time pads are difficult to use in Military settings because rarely is communication going on between just two participants. With the number of units needing to communicate some foolproof means for not using overlapping sequences of the one time pads between different parties is essential. Otherwise, a technique known as multiple anagramming can be used to reveal the plaintext. Generating a secure paper and pencil one time pad is very easy on a computer and can be expected to be completely secure if used properly. Of course, distributing, coordinating, and updating the pads is a weakness of such a system. In the electronic era, messages can still be encrypted with digital one-time pads and this was the case years ago when the secure “hot-line” between the Soviet Leadership and the US president used such a system to communicate. (The hot line wasn’t a phone but a teletype.) This was a perfect use case, a single pair of end points resulting in an unbreakable use of the digital one time pad.
adolph 6y ago
One of the fun things about using the Army one time pads is that depending on how much leeway one had with the words in the message, you could adjust things to spell out stuff in the encrypted string.

Mvandenbergh 6y ago

Also worth noting that most military communications are only sensitive if broken quickly, secret messages sent in espionage might need to stay secret for decades against potentially new mathematical attacks and hardware developments.

jandrese 6y ago

One time pads don't necessarily have to be pen and paper. You can distribute a MicroSD card with 128GB of random bits that is used to encode/decode messages. An additional advantage of a system like this is the OTP can be encrypted so if it is captured it can't be used to decrypt old messages without further getting key material from the end user (possibly with a pipe wrench). The biggest problem is that no matter what, the OTP ends up being some sort of physical medium that requires shipping to the end user. But really it's a scaled up version of the key distribution problem.

35fbe7d3d5b9 6y ago
> An additional advantage of a system like this is the OTP can be encrypted so if it is captured it can't be used to decrypt old messages without further getting key material from the end user (possibly with a pipe wrench). That problem has already been solved and the websites you visit today (should!) be working the same way: https://en.wikipedia.org/wiki/Forward_secrecy https://en.wikipedia.org/wiki/Forward_secrecy > the key distribution problem That is the hardest problem, especially in a system where you've got military units in unfriendly areas.
- mikewarot 6y ago
  Erasing the parts of the pad that have already been used, overwriting them with new hardware generated random numbers would seem to help out forward secrecy. Or am I missing something?

todd8 6y ago

One time pads are difficult to use in Military settings because rarely is communication going on between just two participants. With the number of units needing to communicate some foolproof means for not using overlapping sequences of the one time pads between different parties is essential. Otherwise, a technique known as multiple anagramming can be used to reveal the plaintext. Generating a secure paper and pencil one time pad is very easy on a computer and can be expected to be completely secure if used properly. Of course, distributing, coordinating, and updating the pads is a weakness of such a system. In the electronic era, messages can still be encrypted with digital one-time pads and this was the case years ago when the secure “hot-line” between the Soviet Leadership and the US president used such a system to communicate. (The hot line wasn’t a phone but a teletype.) This was a perfect use case, a single pair of end points resulting in an unbreakable use of the digital one time pad.

adolph 6y ago

One of the fun things about using the Army one time pads is that depending on how much leeway one had with the words in the message, you could adjust things to spell out stuff in the encrypted string.