muddle 🥣
@muddle@infosec.exchange
O day and night, but this is wondrous strange! An a/c to announce, explain and discuss "muddle" "muddle" is a "deniable encryption" scheme which I discovered (and maybe invented). It is the combination of "Online Codes," a so-called "fountain code", and Rivest's concept of "Chaffing and Winnowing". The two are trivial to combine, producing something that seems to have good potential for privacy, deniable encryption and secure dispersal and recovery of files across distributed networks. Please follow, boost or @ me
infosec.exchange
Replying to
@muddle@infosec.exchange
It imagines a world where #E2EE is made illegal or at least a cause for suspicion. It turns the tables by saying, this thing that I am saying... not only am I not ashamed of saying it, but I am using my identity to validate that it is me saying it.
A MAC-based identity/signing system is at the lower end of possibilities. If knowing that the signature matches a known identity gives assurances that this known identity is the source of the message, then why stop with a MAC? If I were to sign each packet with a string of the form "this packet is certified to come from the pen of and comes as part of a longer AONT message which is signed using the publicly-available PGP signature whose checksum is "
#Muddle is also a political statement. It's a not-encryption scheme that's just too stupid to beat.