NODE 298606e8signed mail + steganography = ?
baumbach@atmel.com (Peter Baumbach)Mon, 25 Oct 93 14:44:12 PDT
What if you couldn't tell when a letter was signed unless you new the
public key of the person signing it? How could this be done? Encode
the digital signature with steganography. Is this possible when
steganography alters the very message you wish to sign? I don't know.
The benefit of this is signed and unsigned messages look like each other.
People can't be lazy anymore and just assume the signature is yours.
Your boss isn't likely going to notice you used pgp to sign your mail.
Peter Baumbach
baumbach@atmel.com
NODE d9234550Re: signed mail + steganography = ?
nate@VIS.ColoState.EDU (CVL staff member Nate Sammons)Mon, 25 Oct 93 18:10:09 PDT
-----BEGIN PGP SIGNED MESSAGE-----
writes Peter Baumbach:
>
>What if you couldn't tell when a letter was signed unless you new the
>public key of the person signing it? How could this be done? Encode
>the digital signature with steganography. Is this possible when
>steganography alters the very message you wish to sign? I don't know.
>
>The benefit of this is signed and unsigned messages look like each other.
>People can't be lazy anymore and just assume the signature is yours.
>Your boss isn't likely going to notice you used pgp to sign your mail.
>
>Peter Baumbach
>baumbach@atmel.com
>
>
What if you were to use a higher number of bits per character than
ascii? Then you could use the highest (or lowest) bit for a signature.
This may not be such a good idea for ascii mail, but if there is ever
a real "multi-media" (I _hate_ that term) mail, such as 'ol NeXTmail,
then I can see how it would be easy to squeeze in a signature.
- -nate
- --
+-----------------------------------------------------------------------+
| Nate Sammons email: nate@VIS.ColoState.Edu
| Colorado State University Computer Visualization Laboratory
| Finger nate@monet.VIS.ColoState.Edu for my PGP key
| Key fingerprint = 2D CD 07 CA 7B EC A8 4A 86 7F F3 A8 1D 15 65 46
| Title 18 USC 2511 and 18 USC 2703 Protected --> Monitoring Forbidden
+--------+ Guerrilla Cryptographer Always remember "Brazil"