rw / plainsight

Plainsight: a textual steganography tool to defeat censorship.
http://github.com/rw/plainsight
116 stars 10 forks source link

This concerns me #2

Closed gtaschuk closed 5 years ago

gtaschuk commented 11 years ago

Maybe I'm thinking about this wrong but...

From an abstract level I'm afraid of using this as a cryptosystem b/c you're using a very predictable key (HMM's for language corpora are very regular for large corpora). So this is kindof security by obfuscation, which isn't wise. While I haven't fully thought out how to writa a solver, my intuition is that it would be far easier to brute force a solution to text encoded with this than it would be to back out a cryptographic key in RSA. Basically you have many series of probabilities that are likely common across corpora, and you have series of bits which could be mapped onto those probabilities. Once you start unraveling the chain, it doesn't seem like it would be hard to get the whole thing because you frequent states in a HMM for bigrams/trigrams that correspond to common n-grams.

People use ECC because it provides a high level of Encryption and Authenticity. So if the dissidents IP was known, than they're prob in bad shape if anyone actually reads any of this text and it was decipherable, wheras if they used RSA or something than it looks suspicious but there's nothing anyone can prosecute them on. In this system, if a malicious agent saw that this was going on, and they were able to solve it, they would be able to insert any message they wanted to a recipient without either parties knowledge.

Maybe I'm not understanding whats going on here... Discuss?