Re: [perpass] (Possibly Dumb) EMail Security Idea

I fear this solution may suffer easily from the 'apparently separate channels problem'.

I recall some incident where people had bought triple-redundant links from different long-haul providers -- who all used the same underlying fiber.  One backhoe did them all in.  Similarly, if the client can easily identify which pieces go together, so can a snooper.

On Sep 4, 2013, at 12:40 , Patrick Pelletier <code@funwithsoftware.org> wrote:

> On 9/4/13 2:14 AM, Brian Trammell wrote:
> 
>> I presume each chunk is (1) encrypted and (2) non-contiguous? Otherwise you have the problem that the information density and interesting-information-density in most email messages is unevenly distributed, and then you only really need some subset of the content to get the interesting information out.
> 
> This reminds me a little bit of what Tahoe-LAFS is doing, since they encrypt, then do erasure coding, and send the pieces out to different servers.  The only difference is that you're doing it with email instead of files.
> 
> On the other hand, if you don't want to encrypt, then you could solve the information density problem by using an AONT:
> 
> https://en.wikipedia.org/wiki/All-or-nothing_transform
> 
> Then each piece would mean nothing unless you had all the pieces.
> 
> --Patrick
> 
> _______________________________________________
> perpass mailing list
> perpass@ietf.org
> https://www.ietf.org/mailman/listinfo/perpass

David Singer
Multimedia and Software Standards, Apple Inc.