News for hackers. Stuff that matters.
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by bscphil on Tuesday January 14, 2020 @08:27PM (#22050966)
Hmm. Maybe I'll generate some high quality OTPs for myself with a good CSPRNG. I could use any decent block cipher in counter mode, just need to guard against counter re-use, and then ship my OTPs off to anyone I need to communicate with.

Hang on, if I could come up with a way of securely sharing the key I used with my recipient, I wouldn't need to actually mail the OTP to them, since they could generate it themselves. Should probably include a nonce too.

Now, if only there were a secure method to share the key...

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by jancsika on Wednesday January 15, 2020 @01:08AM (#22052082)
> Now, if only there were a secure method to share the key...

... that doesn't include a critical cryptographic vulnerability. :)

To be generous to the now greyed GP, there's probably a way to teach a recipient a short pad and its proper use so that the recipient can later decode a short ciphertext sent over Twitter. Perhaps even performing that feat in their head. None of the cryptography that could fit your quip has that property.

And if the recipient does something catastrophic like resend the pad over Twitter to confirm they memorized it correctly, there's at least a chance they may catch their error. Perhaps they may even correct it without the goddamned Department of Defense coming into it.

I don't get cryptographers' condescension toward OTP zealots. All they want is a better boat. At least have the decency of the captain from Titanic and apologize while we sink for not having delivered it.

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by Tomte on Tuesday January 14, 2020 @11:56PM (#22051847)
> Maybe I'll generate some high quality OTPs for myself with a good CSPRNG

That's not a one-time pad, it's simply a stream cipher.

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by schoen on Wednesday January 15, 2020 @12:21AM (#22051925)
That's the joke!