top | item 11271809

(no title)

ntucker | 10 years ago

My point is that you don't have to do the encryption on the device. You can send/store encrypted data via compromised devices and channels.

discuss

order

mirimir|10 years ago

Yes. And you can obfuscate it. You can even encode it using packet timing, which is very hard to detect. It's also very inefficient, on the order of 1%, but that's enough for text over HD video. See True Names by Vernor Vinge.

DanBC|10 years ago

You can't trust the device - it's compromised. So even if you use encryption with that compromised device the plain text still leaks.

mirimir|10 years ago

Not if the encrypted text was created on a trusted device.

Consider that, as it is now, encrypted data on the Internet traverses numerous untrusted devices.

For an extreme example, see https://github.com/maqp/tfc-otp