Hacker News new | ask | show | jobs
by anuy 4878 days ago
This article is very poorly written. Few things: author even did not mention the common name "one-time pad" for the technique he explained. one-time pad(OTP) uses the key same length as the data. the key has to come from a true random source that is resistant to side-channel attacks. key transport/exchange is a big issue.

Diffie–Hellman key exchange uses keys shorter than message length using prime field arithmetic. DH key exchange is not really paired with OTP. So author tossing the name of DH key exchange is odd. Good intro about OTP and DH Key exchange is here: http://en.wikipedia.org/wiki/One-time_pad http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exch...

1 comments

A requirement for a One Time Pad is that the key stream be generated from true random numbers. Computerized number generators are pseudorandom number generators. Even cryptographically secure pseudorandom number generators are not true random numbers.

This article describes some of the requirements for a One Time Pad, but its failure to account for the strict requirements of the definition leave us with something that is not provably "unbreakable."