Provably Secure Steganography
170 likes | 387 Vues
Provably Secure Steganography. Nick Hopper With Luis von Ahn John Langford. Ward. Alice. Bob. Steganography: The Prisoner’s Problem. Can’t they use Encryption?. ?. Encrypts “JL BRK 2300H” to get “NM DTQ 0599K”. Ward. “NM DTQ 0599K”. Alice. Bob. Can’t they use Encryption?. ?.
Provably Secure Steganography
E N D
Presentation Transcript
Provably Secure Steganography Nick Hopper With Luis von Ahn John Langford NSF Aladdin Site Review
Ward Alice Bob Steganography:The Prisoner’s Problem NSF Aladdin Site Review
Can’t they use Encryption? ? Encrypts “JL BRK 2300H” to get “NM DTQ 0599K” Ward “NM DTQ 0599K” Alice Bob NSF Aladdin Site Review
Can’t they use Encryption? ? Ward Alice Bob • Cryptography only hides the content of a message • Steganography hides the existence of a message NSF Aladdin Site Review
Secure Stegosystem NSF Aladdin Site Review
Secure Stegosystem A Channel , C, is a distribution on a set D of documents NSF Aladdin Site Review
Secure Stegosystem A Channel , C, is a distribution on a set D of documents A Stegosystem S = (SE,SD) is a pair of algorithms: NSF Aladdin Site Review
Input: Key K Message m Output: sin D* Secure Stegosystem A Channel , C, is a distribution on a set D of documents A Stegosystem S = (SE,SD) is a pair of algorithms: SE NSF Aladdin Site Review
Input: KeyK s in D* Output: Message m Input: Key K Message m Output: sin D* Secure Stegosystem A Channel , C, is a distribution on a set D of documents A Stegosystem S = (SE,SD) is a pair of algorithms: SE SD NSF Aladdin Site Review
Input: KeyK s in D* Output: Message m Input: Key K Message m Output: sin D* Secure Stegosystem A Channel , C, is a distribution on a set D of documents A Stegosystem S = (SE,SD) is a pair of algorithms: SE SD With high probability, SD(K,SE(K,m)) = m NSF Aladdin Site Review
Input: KeyK s in D* Output: Message m Input: Key K Message m Output: sin D* Secure Stegosystem A Channel , C, is a distribution on a set D of documents A Stegosystem S = (SE,SD) is a pair of algorithms: SE SD With high probability, SD(K,SE(K,m)) = m S is secure if output distribution of SE(K,m) for any m is computationally indistinguishable from C NSF Aladdin Site Review
SE FK FK SD Construction C NSF Aladdin Site Review
SE FK FK SD Construction C Shared Pseudorandom Function NSF Aladdin Site Review
m 0 SE SD Construction C FK FK FK 1 0 0 1 1 NSF Aladdin Site Review
SE SD Construction C FK FK FK majority=0 0 0 1 NSF Aladdin Site Review
Results • Secure steganography exists if and only if one-way functions exist • “Robust Steganography” is possible if one-way functions exist • There is a CAPTCHA such that, either the CAPTCHA is secure, or robust steganography for images is possible. • Public-Key steganography is possible, under widely believed cryptographic assumptions • Essentially tight upper and lower bounds on the maximum rate of a stegosystem NSF Aladdin Site Review