Trans Vernam Cryptography: Round One
This invention establishes means and protocols to secure data, using large undisclosed amounts of randomness, replacing the algorithmic complexity paradigm. Its security is credibly appraised through combinatorics calculus, and it transfers the security responsibility to the user who determines how much randomness to use. This Trans-Vernam cryptography is designed to intercept the Internet of Things where the ‘things’ operate on limited computing capacity and are fueled by fast draining batteries. Randomness in large amounts may be quickly and conveniently stored in the most basic IOT devices, keeping the network safe.
1 . A symmetric cryptographic method called ‘Trans Vernam’ where secrecy is established by use of large as desired, quantities of randomness, where both the identity and the number of random bits constitute the cryptographic key, which is processed in conjunction with the plaintext, deploying only simple bit-wise operations such that the effort of compromising the cryptogram, to the extent feasible, is credibly appraised in terms of required computational load.
2 . A method as in ( 1 ) where the user insures that a cryptanalyst in possession of only the cryptogram will not be able to determine with certainty the generating plaintext of that cryptogram, even if that cryptanalyst has unlimited computational capacity.
3 . A method as ( 1 ) where the user may use so much randomness that the cipher will be of Vernam grade, namely exhibit unconditional mathematical secrecy.
4 . A method as in ( 1 ) where the parties exchange a durable secret key in the form of a bit string of any desired size, and where each time the parties use the cipher for a communication session then the sender randomly selects ad-hoc session keys that are processed together with the durable secret to exercise a protocol that is immunized against a re-play attack, that prevent re-play fraud.
5 . A method as in ( 4 ) where one of the parties selects a size-adjusting factor in the form of a binary string, and that is operated on in conjunction with the durable secret key to generate a session base key, K b which is a bit string of a desired size (bit count).
6 . A method as in ( 5 ) where the parties agree on a method to parse the session base key to n unique substrings, and where the sender randomly selects a transposition key K t (n) and applies it to transpose the n substrings identified on the session base key, to any of its n-factorial (n!) permutations, each permutation has a 1/n! chance to be selected, and where the transposed string is regarded as the transposed session base key, K* b ; and where furthermore the sender communicates the transposed session base key (K* b ) to the recipient, so that the recipient will verify that the transposed session base key is indeed a transposition of the session base key according to the recipient computation based on his or her knowledge of the session base key and the method of parsing it to n substrings; and where upon verification that K* b is a transposed version of K b the recipient (i) is assured that the sender shares the same durable secret key and then (2) finds out the value of the transposition key, K t from comparing K b and K* b .
7 . A method as in ( 6 ) where the parties use the transposition key K t to encrypt all the messages in that session, whether as a stand alone cipher, or as a cipher ingredient in a larger scheme.
8 . A method as in ( 6 ) where the transposition key K t is determined from a physical noise, or other phenomena, and is not an algorithmic outcome.