3 ms·
> compression before encryption What's the matter with that? It should be secure with any modern cryptography primitives. (I mean, it's obviously no less secur
by bscphil 3y ago
> compression before encryption
What's the matter with that? It should be secure with any modern cryptography primitives. (I mean, it's obviously no less secure to do `age -e myfile.7z` than it is to do `age -e myfile`.)
- Avamander 3y agoIt creates a compression oracle, potentially leaking parts of plaintext.
- SpaghettiCthulu 3y agoThe compression oracle (a lookup table if I'm not mistaken) would still be encrypted, right?
- dale_glass 3y agoSometimes you can interrogate the compression. CRIME attack: if you can provide something to the target system, then it will compress differently depending on what's provided. If you guess right, then the compressed version will be smaller. VOIP statistics: You can make very good guesses about encrypted voice communication by knowing how it compresses speech, figuring out how long different phonemes are, and statistically trying to reconstruct the conversation.
- the_only_law 3y ago> VOIP statistics: You can make very good guesses about encrypted voice communication by knowing how it compresses speech, figuring out how long different phonemes are, and statistically trying to reconstruct the conversation. This sounds interesting, do you know of any good resources to start learning about how to do this?
- dale_glass 3y agoFound it: http://www.cs.unc.edu/~fabian/papers/foniks-oak11.pdf http://www.cs.unc.edu/~fabian/papers/foniks-oak11.pdf
- thayne 3y agoHow would you make a CRIME attack with typical use cases for OpenPGP? Most cases I've seen PGP/GPG used, there isn't any opportunity for chosen plaintext.