Hacker News new | ask | show | jobs
by FakeComments 2405 days ago
How is that not analogous to a wall safe with my journal in it?
3 comments

In my view it depend on two philosophical questions; does the journal exist when it rests in the safe, and does information exist when it is encrypted?

To simplify it, let's imagine a one time pad encryption. Does the information exist, or does it only exist in potentia? I think there is a good argument in favor of defining it only in terms of potential information as any one time pad can represent any information of the same length (or smaller if we accept padding).

With Schrödinger's cat experiment we could create a similar setup for the journal but it's questionable if we can still apply the perspective that the journal only exist in potentia. From the cat's perspective it knows if it exists or not. The encrypted information however has a more metaphysical environment and it is more questionable if it can be said to have a similar perspective.

We're talking about a 64-character password, not a one-time pad. Unlike a one-time pad, you can tell whether you've undone the encryption correctly. There is real information there that a third party can uncover given enough effort.
For simplicity sake we can see the password as representing a infinitive long stream for a one-time pad generator with the seed being the hash of the 64-character password.

The way programs detect if the encryption is successful is usually by looking at the first bits of information with the assumption that random collisions are unlikely to produce an expected pattern. Not all decryption systems does this however and some just give you the data as produced by the given key.

Both are however just technical details in how to turn the potentia of the random-like encryption data into information.

I'm not sure what you're trying to simplify here. If a third party can tell whether they've successfully guessed the right password, then the encrypted holds real information that the third party can learn with sufficient effort.

If it's just random bits that you need a one-time pad to decode, then there isn't any information without the decryption key.

If you're encrypting a hard drive, most encryption methods give you full certainty that you've correctly decrypted the text, in the same way that you'd have full certainty that you've correctly opened a safe and found the journal inside.

>If you're encrypting a hard drive, most encryption methods give you full certainty that you've correctly decrypted the text

I was thinking about mention it before when I wrote the above comment but it was already becoming a lengthy comment.

Truecrypt (now Veracrypt) is one of the more popular disk encryption software and was part of at least one US lawsuit in regard to revealing passwords. Truecrypt support a technique called hidden drives. The technique use the fact that free space is indistinguishable from encrypted data, so an attacker can never be fully certain if they have decrypted the whole data or just part of it.

A older and similar concept was/is utilized by Freenet project. Here the data get one-time pad encrypted using existing encrypted data blocks of same size. Each encrypted block then becomes both the key and data from the perspective of the encryption scheme, and the same block can be reused multiple times as one side of the operation for any given number of decrypted data. In order to decrypt a given file you need to first download the map that identify which blocks represent both sides of the one-time pad encryption, then the blocks which combined are twice the size of the decrypted data, and then do the operation. Freenet theorized that since any block could be the key/data for any other block you could never be certain of what information you have stored by looking at a single block. The block is just information in potentia.

Do you have any reason to think that what you're describing is what happened here? It seems unlikely to me, as it would mean that the guy could have given out a decryption key that would exonerate him.
There is nothing that is similar. The journal is a physical thing you can lay your hands on and the password exists only in the individuals mind. The act of producing it is both inherently testimonial and testimony to ownership of the contents of the data on the machine which is distinct from ownership of the machine.

It is further impossible to distinguish between won't and can't unlock.

Even if believed that you can subpoena the content of your skull you arrive at a situation where every criminal "can't remember"

Giving out the code to a wall safe demonstrates my ownership of the safe contents in exactly the same way that giving out the password to a computer demonstrates my ownership of the contents of the computer.
It seems so. It seems unlikely that such an order would be successful so they would drill the safe.
The point of bringing up wall safes is that it courts have already ruled that it's unconstitutional to require someone to give up a wall safe combination.
Isn't there a right to not testimony against oneself?
This was the point of the article.
No, the point was that there was a ruling on it from a highly divided court that only applies to Pennsylvania.

The article didn't really argue something like that. It only reported on a court case and really didn't say if they agree with the decision or not.

In my view, it’s analogous to a journal that will only exist once you have written (some of) it down in front of them. The encrypted content can only exist in decrypted form with the information in your head.
This is how wall safes are supposed to work too, which is why you can't be compelled to reveal the combination.