News for hackers. Stuff that matters.
Re:"Unbreakable" Encryption Almost Certainly Isn't by danso on Tuesday April 08, 2014 @09:18AM (#7553153)
> The researchers, led by Dr. Tomislav Stankovski, created an encryption mechanism that can generate a truly unlimited number of keys, which they say vastly increases the security of the communication. To do so, they took inspiration from the anatomy of the human body.

Maybe this is just a problem of imprecise language and reporting, but when has the ability to generate an unlimited number of keys ever been the main problem? I always thought the problem was distributing/maintaining such a number of keys, and to a lesser extent, generating those keys in a reasonable amount of time.

Because wasn't "unbreakable" encryption invented a long time ago, and implemented successfully since? That is, one-time pads, which are theoretically unbreakable by anyone who is not omniscient? Of course, the problem of distributing and maintaining such keys gets in the way of popular implementation...

edit: I'm obviously not suggesting that one-time pads have solved much of anything...just that, why do researchers brag about creating an infinite number of keys, or even "unbreakable" encryption, when those don't seem to be much of a real-world problem...Maybe in this case it's just bad reporting and translation of researcher-speak. Now, extremely-unfeasible-to-break while feasible-to-use...that's clearly worth bragging about.

Re:"Unbreakable" Encryption Almost Certainly Isn't by JackGibbs on Tuesday April 08, 2014 @09:54AM (#7553391)
For no encryption scheme is the key space unlimited.

For symmetric key ciphers, the keys are of a set length. AES accepts key lengths of 128, 192, and 256 bits.

For asymmetric ciphers, they vary even more. The RSA-XXXX designation refers to the length of n, which is the product of two primes (which must be kept secret) p and q. So for RSA-2048, p and q are roughly 1024-bit numbers. In addition, the secret exponent can frequently be quite large, although as it's calculated from the public key exponent and n its size is not guaranteed.

Ultimately however, all of these are designed so that the key spaces are too large to be feasibly brute-forced searched. The reason for the much larger size of the keys for the asymmetric ciphers is that their security is usually based on the difficulty of solving a problem (in RSA's case, factoring n into p and q, or the equally difficult problem of determining the totient of n) that gets more difficult as the keys get larger.

EDIT: And yes, one-time pads are theoretically unbreakable, however they can only be used once (as the name implies, but if they are used twice recovering the key is trivial), must rely on a sufficently good quality random number generator (which Matt Green recently had a very good article describing how hard it is to do: http://blog.cryptographyengineering.com/2014/03/how-do-you-k...) and they have the same issues that any symmetric key ciphers have, in terms of key distribution. They're useful when you have old women in Bletchley Park spinning bingo balls and carefully copying into two notebooks. Less so when you're trying to build a usable system for secure communication.

Re:"Unbreakable" Encryption Almost Certainly Isn't by stygiansonic on Tuesday April 08, 2014 @10:59AM (#7553805)
From just reading the linked to article, (I have not read the full paper) it appears that the researcher has conflated the size of the key space with whether or not the encryption algorithm is secure.

Size of the key space only really matters when the only known attacks have a time complexity proportional to the size of the key space, i.e. brute force.

If the algorithm itself is horribly broken then it doesn't matter much. For example, a monoalphabetic substitition cipher actually has a rather large key space (26!) but this doesn't really matter.

Re:"Unbreakable" Encryption Almost Certainly Isn't by TeMPOraL on Tuesday April 08, 2014 @10:45AM (#7553703)
> I'm obviously not suggesting that one-time pads have solved much of anything

Well, they did. Think about various secret channels between governments, like the Washington D.C. - Moscow line.

http://en.wikipedia.org/wiki/One-time_pad#Historical_uses

Re:"Unbreakable" Encryption Almost Certainly Isn't by dghf on Tuesday April 08, 2014 @11:57AM (#7554164)
I read a novel by a former SAS soldier about a former SAS soldier who's sent on deniable operations by the British government, and who uses what is clearly a one-time pad to communicate with his handlers. The detailed description of the precise method used, the fact that the term "one-time pad" is never used, and the narrator's apparent lack of understanding of how exactly it works (encryption/decryption is done via modulo-10 addition/subtraction, which the narrator derisively refers to as "spook maths") suggest that the author himself, or a contact of his in the same circles, has used a very similar system for real.
Re:"Unbreakable" Encryption Almost Certainly Isn't by rdtsc on Tuesday April 08, 2014 @09:45AM (#7553321)
> why do researchers brag about creating an infinite number of keys, or even "unbreakable" encryption,

To generate some funding and impress gullible people? It is like unlimited energy or flying car projects.