3 ms·

Hundreds of Megabytes? That’s a big number to you? Did you step out of a time warp from 1990? Also you are surprisingly quite clueless about basic crypto if yo

Hundreds of Megabytes? That’s a big number to you? Did you step out of a time warp from 1990? Also you are surprisingly quite clueless about basic crypto if you think storage is the biggest issue with practically using one time pads (though it is indeed one). I’m pretty sure even the Wikipedia article can explain this so no reason to spoon feed it here.

chrisseaton 5y ago
> Hundreds of Megabytes? That’s a big number to you? If you only have a hundred MB of data to send… a hundred MB of key is sufficient to use as a one-time pad. Until digitisation the military literally did encryption over radios using physical pads - everyone carried a big one-time-pad (just a few tens of KB though). It was done as a lookup table rather than an XOR though.
- monocasa 5y ago
  The pad system used by the military predigitisation[0] was a set of keys to input into a keystream generator rather than a strict one time pad style system, except for very specific and limited espionage use cases. And it wouldn't be one time, it'd be on the order of a daily key rotation with key reuse (with maybe a few chosen per day depending on classification level). [0] I'm assuming we mean computerized here. Old school cipher machines of the type of the ENIGMA and M-209 were arguably digital machines, just base ~26.
  - chrisseaton 5y ago
    > I'm assuming we mean computerized here No, pre common man-pack digital radios, so as recently as just prior to this century. They used paper one-time pads, with a big list of table indices for substitution. You still get them for use when you have no digital crypto for whatever reason.
    - monocasa 5y ago
      That's not quite what I'm seeing, instead that what I believe you're talking about (Morse code over open air with a Diana cipher backed by one time pads) were pretty much exclusively used by special forces in Vietnam. The issues with key distribution inherent in one time pads otherwise got in the way of cross team cooperation too much since each pad would only exist in two places (the spec ops team, and a major base close by, but not a FOB in case it was overrun). They might have taught that use case to radio operator MOSs, but it wasn't actually deployed in the general case it seems.
      - chrisseaton 5y ago
        > That's not quite what I'm seeing ... it wasn't actually deployed in the general case I'm was literally trained in the British variant of technique I'm describing. There's a wikipedia article about it, and it's referenced from this cryptography wiki's one-time-pad page. Other countries used similar systems. https://en.wikipedia.org/wiki/BATCO https://en.wikipedia.org/wiki/BATCO https://cryptography.fandom.com/wiki/One-time_pad https://cryptography.fandom.com/wiki/One-time_pad
        deleted 5y ago
        [deleted]
        monocasa 5y ago
        So if I'm understanding BATCO correctly, there's an average key reuse by a single sender after 13 messages because of the how the traffic key rotation selects a row? That, combined with the sense I'm getting that the cipher sheets were distributed widely (auth tables imply multiple senders using the same cipher sheet at the same time) seems to imply broad reuse of key rows, making it a pad, but not a one time pad. Do my assumptions filing in the blanks line up? I'll give it that's it's definitely way better than DRYAD, which is pretty universally not considered a OTP because of the much greater key reuse (like how auth uses the same cipher tables as encrypt, leaking tables). So it boils down to the practical use case on whether it falls into OTP.

chrisseaton 5y ago

> Hundreds of Megabytes? That’s a big number to you? If you only have a hundred MB of data to send… a hundred MB of key is sufficient to use as a one-time pad. Until digitisation the military literally did encryption over radios using physical pads - everyone carried a big one-time-pad (just a few tens of KB though). It was done as a lookup table rather than an XOR though.

monocasa 5y ago
The pad system used by the military predigitisation[0] was a set of keys to input into a keystream generator rather than a strict one time pad style system, except for very specific and limited espionage use cases. And it wouldn't be one time, it'd be on the order of a daily key rotation with key reuse (with maybe a few chosen per day depending on classification level). [0] I'm assuming we mean computerized here. Old school cipher machines of the type of the ENIGMA and M-209 were arguably digital machines, just base ~26.
- chrisseaton 5y ago
  > I'm assuming we mean computerized here No, pre common man-pack digital radios, so as recently as just prior to this century. They used paper one-time pads, with a big list of table indices for substitution. You still get them for use when you have no digital crypto for whatever reason.
  - monocasa 5y ago
    That's not quite what I'm seeing, instead that what I believe you're talking about (Morse code over open air with a Diana cipher backed by one time pads) were pretty much exclusively used by special forces in Vietnam. The issues with key distribution inherent in one time pads otherwise got in the way of cross team cooperation too much since each pad would only exist in two places (the spec ops team, and a major base close by, but not a FOB in case it was overrun). They might have taught that use case to radio operator MOSs, but it wasn't actually deployed in the general case it seems.
    - chrisseaton 5y ago
      > That's not quite what I'm seeing ... it wasn't actually deployed in the general case I'm was literally trained in the British variant of technique I'm describing. There's a wikipedia article about it, and it's referenced from this cryptography wiki's one-time-pad page. Other countries used similar systems. https://en.wikipedia.org/wiki/BATCO https://en.wikipedia.org/wiki/BATCO https://cryptography.fandom.com/wiki/One-time_pad https://cryptography.fandom.com/wiki/One-time_pad
      - deleted 5y ago
        [deleted]
      - monocasa 5y ago
        So if I'm understanding BATCO correctly, there's an average key reuse by a single sender after 13 messages because of the how the traffic key rotation selects a row? That, combined with the sense I'm getting that the cipher sheets were distributed widely (auth tables imply multiple senders using the same cipher sheet at the same time) seems to imply broad reuse of key rows, making it a pad, but not a one time pad. Do my assumptions filing in the blanks line up? I'll give it that's it's definitely way better than DRYAD, which is pretty universally not considered a OTP because of the much greater key reuse (like how auth uses the same cipher tables as encrypt, leaking tables). So it boils down to the practical use case on whether it falls into OTP.