4 ms·
One-time pads are completely unbreakable if you use them correctly. Using them correctly is impractically difficult for most people. Your key has to be as lon
by msla 3y ago
One-time pads are completely unbreakable if you use them correctly.
Using them correctly is impractically difficult for most people.
Your key has to be as long as the sum total length of all of the messages you send along that communications channel, and it has to be completely random. Reusing any key material, or having a less-than-random key, breaks the security. Losing your place in the gigantic key you're using doesn't break security, but it makes the result impossible to decrypt unless you try every possible offset within the key to see which one gives a reasonable decryption.
Therefore, someone selling a "one-time pad" security system isn't really selling a one-time pad system at all, because people wouldn't buy an email encryption solution which required them to generate, distribute, and keep their place in an impractically large key.
It's possible to come up with scenarios where a one-time pad is a good solution. Spies have used them in the past and are likely using them now. But they're impractical and they're used as a buzzword by scammers.
- Noumenon72 3y agoWouldn't there be software to keep your place in the key? I don't see how the key is "impractically large" if it's only the size of your original email.
- boneitis 3y agoWhile we're here, (and if anyone could chime in and refine or otherwise pick apart my analogy), it's impractical in the sense that it still requires us to take care of all the key and session management business in the real world, which is why AEAD systems and the like are necessary (in order to reliably and safely construct "one-time pads" under the hood). I've always considered the OTP to be (not in some strict, rigorously correct sense) more like an ideal, theoretical/abstract cipher, much like how a Turing machine, generally unconcerned with a practical limit in tape size, is a sort of idealized, abstract computer. "It is the Turing machine of encryption schemes"?
- msla 3y ago> I don't see how the key is "impractically large" if it's only the size of your original email. So you're only sending one email and not getting a reply?