3 ms·
Thanks for the thoughtful analysis. I want to address the one-time pad comparison specifically, as this is a common misconception. ZOSCII is fundamentally diffe
by zhulien 1y ago
Thanks for the thoughtful analysis. I want to address the one-time pad comparison specifically, as this is a common misconception.
ZOSCII is fundamentally different from a one-time pad:
A one-time pad has a 1-to-1 relationship:
Each plaintext bit maps to exactly ONE ciphertext bit (via XOR with pad)
Given the pad, there's exactly ONE decryption
Security comes from the pad being unknown
ZOSCII has a many-to-many relationship:
Each plaintext byte can be encoded as ANY of ~256 different addresses (wherever that byte value appears in the LUT)
The same message can generate 256^(message_length) different address sequences
For a 10-byte message, that's approximately 1.2 × 10^24 different valid encodings of the identical plaintext
This creates exponential, not linear, ambiguity. With a 64KB LUT (65,536 addresses), you're working in a much larger combinatorial space than "256 pads" - you're selecting from 65,536 possible addresses with ~256 valid choices per byte.
Regarding practical implementation on 8-bit systems:
You don't need 64KB - that's just a practical good size. A 16KB LUT still provides millions of combinations and achieves 100% information-theoretic security. The LUT size is flexible based on your constraints.
For encoding sizes:
16-bit encodings: 2x original data size
32-bit encodings: 4x original data size
64-bit encodings: 8x original data size
Without preprocessing, an 8-bit computer only needs to hold the LUT itself in memory (16KB, 64KB, etc.). With preprocessing for faster two-way lookups, you need approximately 2.1x the LUT size plus the original table - but this enables near-instant encoding/decoding.
The security model is entirely different:
OTP security: "You can't determine the plaintext without the pad"
ZOSCII security: "Even with a candidate LUT, you cannot prove which of many valid plaintexts is the original"
This provides plausible deniability that OTP cannot achieve. The same address list could decode to "ATTACK TOMORROW" or "HELLO MOTHER" depending on which LUT you use - and there's no mathematical way to prove which interpretation is correct.
Regarding your point about mathematical encryption with comparable key sizes - yes, traditional crypto is more efficient. But ZOSCII isn't competing on efficiency; it's providing fundamentally different security properties: undetectable encoding with perfect deniability. The encoded output is indistinguishable from random data or any other legitimate data format.