|
|
|
|
|
by less_less
874 days ago
|
|
> An OTP must have particular properties that words in a book don’t have to be provably secure. However, common materials that the communicators have access to without specific distribution can be useful for OTPs in their own way (though not provably secure). Using a passage from a book directly as an OTP is not secure at all. It's similar to the result of reusing an OTP: it gives an attacker two messages in (e.g.) English whose sum (using a book as an OTP) or difference (reused OTP) is known. Since the entropy of English is around a bit per character (more or less), and the deltas reveal almost lg(26) ~ 4.7 bits per character, knowing the sum or difference can determine most of the contents of the message in either case. Reading every n'th letter in the book is probably marginally harder to break, but I still wouldn't rely on it for anything serious. |
|
[1] https://news.ycombinator.com/item?id=39091867