[1947] in cryptography@c2.net mail archive
Re: Speaking of rubber hoses [was Re: Storage encryption tools]
daemon@ATHENA.MIT.EDU (David Honig)
Thu Dec 11 16:34:15 1997
Date: Thu, 11 Dec 1997 10:04:11 -0800
To: Julian Assange <proff@iq.org>, David Honig <honig@otc.net>
From: David Honig <honig@otc.net>
Cc: "James A. Donald" <jamesd@echeque.com>, coderpunks@toad.com,
cryptography@c2.net
In-Reply-To: <wx90ts1zka.fsf@profane.iq.org>
At 11:41 AM 12/11/97 +1100, Julian Assange wrote:
>
>This is the problem with simple byte-interleaving - even when compressed,
once
>you have the decoy key, you can uncompress the decoy and show there's
>`something more'.
>
>What's "nice" about my scheme (and it really only works for encrypted file
>systems), is that it's not computationally (or physically if I have my
>anti-stm statistical attack method done right) feasible to show that there
>is any "cargo" at all - what you are seeing as gaps between the duress
>data, is exactly what you would see if the duress file-system wasn't full
>(yet). i.e it's not possible given a set of duress keys to show that
>the "empty" blocks are anything but empty blocks - i.e copy material into
>the duress file-system and they will be assigned, and over-written as one
>would expect if you only had the duress key.
Good point. However, a file-system approach doesn't work for transmitted
info,
e.g., email.
What everyone really needs is a good jpeg stego program plus a rubber-hose
denial system.
Maybe the next PGP plugin for Eudora?
"We notice that you've been sending pictures to a dubious site"
"Well, I have a friend there is all."
"We have reason to believe you're sending messages in the pictures. By the
way, Meet Mr. Hose. Oh, also, your kids are in the next room, we borrowed
them from day care."
"Uhhh... Ok, I'm having an affair, don't tell my wife, here's my (duress)
key".
------------------------------------------------------------
David Honig Orbit Technology
honig@otc.net Intaanetto Jigyoubu
M-16 : Don Quixote :: PGP : Louis Freeh
Let freedom ring (or screech at 28.8)
