3 ms·

I would agree in the ideal case, that with diligent usage of the Enigma machine with fresh keys/pads for each transmission, one’s transmissions would likely be

I would agree in the ideal case, that with diligent usage of the Enigma machine with fresh keys/pads for each transmission, one’s transmissions would likely be secure, at least from the means and methods available to the Allies at the time. However, in the fullness of time and with research into and with declassification of wartime intelligence thereof since the war of the now-known semi-regular failures to key and operate the Enigma machine properly, the hypothetical serially encoded (Enigma + one-time pad) materials would possibly be able to be attacked due to operator errors/failures of key rotation independently of and/or combined with known-plaintext attacks, but I will defer to you on the actual cryptanalysis and mathematical modeling. I humbly admit that am not well-versed in this field, and I am not anything other than a fan of you and your work in the computing field, as it is mostly over my head.

WalterBright 1y ago
The one-time pads could simply be a national newspaper on a particular date. Another simple method would be to add an offset to the "rendevous at XX longitude and YY latitude" coordinates and time.
- aspenmayer 1y ago
  I’m reminded by your newspaper suggestion that I once read that Dread Pirate Roberts aka Ross Ulbricht had part of their setup infected by a 0-day delivered via a news website, possibly via a third party ad network, but I don’t remember the details and don’t have a source at hand, nor do I know as a matter of fact that this occurred or was merely reported or rumored. All of this is to say that I’m not sure that inconsistencies couldn’t be intentionally introduced in even the printed material to throw off encryption attempts if the source of the one-time pad were to have leaked. Knowing what is public knowledge regarding Crypto AG being compromised, I’m not willing to bet that a newspaper would be a safe bet for source material. A King James Version Bible, perhaps. On the other hand, you have more fingers, and the long arm of the law casts an even longer shadow in wartime. Multi-armed bandits exist.

WalterBright 1y ago

The one-time pads could simply be a national newspaper on a particular date. Another simple method would be to add an offset to the "rendevous at XX longitude and YY latitude" coordinates and time.

aspenmayer 1y ago
I’m reminded by your newspaper suggestion that I once read that Dread Pirate Roberts aka Ross Ulbricht had part of their setup infected by a 0-day delivered via a news website, possibly via a third party ad network, but I don’t remember the details and don’t have a source at hand, nor do I know as a matter of fact that this occurred or was merely reported or rumored. All of this is to say that I’m not sure that inconsistencies couldn’t be intentionally introduced in even the printed material to throw off encryption attempts if the source of the one-time pad were to have leaked. Knowing what is public knowledge regarding Crypto AG being compromised, I’m not willing to bet that a newspaper would be a safe bet for source material. A King James Version Bible, perhaps. On the other hand, you have more fingers, and the long arm of the law casts an even longer shadow in wartime. Multi-armed bandits exist.