News for hackers. Stuff that matters.
Re:EU Draft Council Declaration Against Encryption [pdf] by ben_w on Sunday November 08, 2020 @04:19PM (#25029157)
Yes.

1. Encrypt as normal.

2. Given a language model which can generate a choice of multiple possible next-symbols given what has already been written, use bytes from the cypher text to choose between the available options.

For example, using the predictive text options on my iPhone, and treating 0=left 1=right, the cypher text 011100 and the starting symbol “Hi”, I get:

“Hi I have heard from the other”

(Note: I’m fairly sure the iPhone predictive text system is personalised and therefore time-variable, but the general idea still applies if you are in full control of the system).

3. If the other party knows the model and the initial word, they can use an equivalent process to recover the cypher text and put that into the normal decryption routine.

Re:EU Draft Council Declaration Against Encryption [pdf] by dane-pgp on Sunday November 08, 2020 @05:23PM (#25029680)
This is the correct answer, although it's worth thinking about what the threat model is.

If the government is just going to force specific companies to add backdoors, then the process above isn't really necessary, you just need a way to install a client that isn't backdoored. If, however, the government is banning the sending of encrypted messages, then you have to hope that a jury doesn't see your long pointless messages as strong evidence of using encryption.

To improve slightly upon the language model example given above, though, I suggest something like this:

https://bellard.org/textsynth/sms.html

Re:EU Draft Council Declaration Against Encryption [pdf] by dheera on Sunday November 08, 2020 @06:00PM (#25029907)
> then you have to hope that a jury doesn't see your long pointless messages as strong evidence of using encryption

Don't legal people routinely just take few word sentences and rewrite them into long paragraphs of aforementioned hereinafter notwithstanding including but not limited to senseless nonsense?

Re:EU Draft Council Declaration Against Encryption [pdf] by ben_w on Sunday November 08, 2020 @06:51PM (#25030181)
So long as it looks normal for you, I suspect you’d be fine.

If I started writing long paragraphs of aforementioned hereinafter notwithstanding including but not limited to senseless nonsense, I’d be really obvious — at least to a human, not sure if current AI would notice me yet.

Re:EU Draft Council Declaration Against Encryption [pdf] by floatboth on Sunday November 08, 2020 @08:45PM (#25030661)
Plausible deniability though – who said you can't have a hobby of intentionally making up nonsense texts, sending them to friends to laugh at?

(Of course the public existence of software that does this could definitely make that excuse less convincing.)

Re:EU Draft Council Declaration Against Encryption [pdf] by dheera on Sunday November 08, 2020 @10:17PM (#25031143)
Hmm, I think a better strategy might be embedding the ciphertext in the fur of cat pictures. Sending lots of cat pictures seems pretty normal for anyone. Might be possible to create a GAN that outputs a synthesized cat picture with a constraint of some ciphertext that can be decoded later. Or simple modulation might just work, if I can convince JPEG to not wreck it.
Re:EU Draft Council Declaration Against Encryption [pdf] by ben_w on Monday November 09, 2020 @03:58AM (#25032784)
That is higher bandwidth, but for normal chat apps I would expect randomly applied compression in transit breaking things. Email could work though? And if you’re generating the JPEG or PNG yourself, you can put the cypher text in at whatever level you like, including highest entropy bits of the compressed data.

You’d have to be very careful to seem “normal”, as carelessly doing that can change the entropy in a detectable way even for the least significant bits — the least significant bits saved in something like JPEG is not the sensor noise, it’s the smallest stuff that humans pay attention to.

Re:EU Draft Council Declaration Against Encryption [pdf] by grumio on Monday November 09, 2020 @01:44PM (#25038098)
Maybe something that's aided by an AI that generates English texts(a little similar to your iPhone auto-suggest, but more advanced) so that the sentences are valid and coherent. The recipient would need to know some sort of key/"seed" for the AI, that you'd give them in another channel. I bet something like that would be possible, but the ciphertext would be much larger than the plaintext. Still a fun idea.