DEA.FI

Increased surveillance by private entities, corporations and governments calls for protected communication channels. This is a suggestion for one such system.

As it has been mathematically proven, one-time pads can’t be broken provided that the keystream is only used once, and that the keystream is truly random. In addition the key must be exchanged and handled in a secure way.

The system creates a point to point connection between two trusted peers. Both peers have the key material available, split to two distinct stores each. Peer A uses store A to send data, and peer B uses the same store to receive it. When B sends, store B is used.

The peers exchange constant-sized packets at a constant interval. For example 400 byte packets at 5 Hz regardless of the actual transmitted data. This is to thwart traffic analysis. Sure, it can be said that the parties are connected, but actual communication patterns can't be discovered.

Packet payload consists of a monotonically increasing packet id, HMAC-based message authentication code, a tiny flag field and the actual framed payload.

And also, that would be kinda cool.

Additional information will be released when/if this moves beyond the already existing proof-of-concept.