<div dir="ltr"><br><table class="aboutme-emailsig-thumb" id="aboutme-emailsig-thumb" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr><td style="width:auto;height:20px;font-size:0px"> </td></tr>
<tr><td style="width:auto"><div style="line-height:0">
<a href="https://about.me/c.ionutmihai1?promo=email_sig&utm_source=email_sig&utm_medium=external_link&utm_campaign=chrome_ext" style="text-decoration:none;display:inline-block">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td align="left" valign="top" style="width:107px;line-height:1;vertical-align:top">
<img alt="--" width="0" height="0" style="display:block;width:0;height:0;overflow:hidden">
<div>
<img src="https://thumbs.about.me/thumbnail/users/c/dot/i/c.ionutmihai1_emailsig.jpg?_1460197655_25" alt="" width="105" height="70" style="margin:0;padding:0;display:block;border:1px solid #eeeeee">
</div>
</td>
<td style="width:10px;font-size:0px"> </td>
<td align="left" valign="bottom" style="width:auto;line-height:1;padding:0px;padding-bottom:3px;vertical-align:bottom">
<div style="margin:0;font-size:18px;font-weight:bold;color:#333333;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,Sans-Serif">Chelalau Ionut Mihai</div>
<div style="margin:0;margin-top:1px;font-size:12px;color:#2b82ad;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,Sans-Serif"><img alt="https://" width="0" height="0" style="display:block;width:0;height:0;overflow:hidden">about.me/c.ionutmihai1</div>
</td>
</tr>
</tbody>
</table>
</a>
</div></td></tr>
<tr><td style="width:auto;height:20px;font-size:0px"><img src="https://about.me/t/sig?u=c.ionutmihai1&s=chrome_ext" width="1" height="1" style="border:0;margin:0;padding:0;width:1;height:1;overflow:hidden"></td></tr>
</tbody>
</table>
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small;color:#444444"><br></div><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Mihai Ionut</b> <span dir="ltr"><<a href="mailto:c.ionutmihai1@gmail.com">c.ionutmihai1@gmail.com</a>></span><br>Date: Thu, Apr 14, 2016 at 12:21 PM<br>Subject: Re: [messaging] WaveCrypt<br>To: Joseph Gentle <<a href="mailto:me@josephg.com">me@josephg.com</a>><br><br><br><div dir="ltr"><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)">Thanks for feedback. </div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)">I really enjoyed that 1992 sneakers video, not only because it showed a very simple "fix" but it gave me a nostalgia feeling. You know, nowadays when we are learning computer science they tend to forget a lot of details. Because the time is short they have to compress the learning materials so that they can give us "the important stuff". By doing so however they deprive us, the young generation, from knowing the basics. They don't longer "waste" time with teaching the early programming languages, those things are just specified on the last page of the manual with the smallest font available.</div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)">There's another aspect to this. While I was working on WaveCrypt I've read books not only about cryptography or sound design and audio synthesizers but also about assembly language and how the nowadays audio formats came to be (wav, mp3 etc). So, when we take a look at our entire computer science history and the various difficulties we've had in the past it's impossible not to have a beautiful thought in my mind... : why can't I simply create my own audio format? Why can't I simply design my own primitive operating system on that custom printed circuit board? Why can't I create an special error-correcting code (a special version of Hamming) so that the audio input I record would be able to verify it's source, without compromising its integrity?</div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)">I will really work on this in the summer. I've found online some retro radio kits and it would be a lot of fun in trying to encrypt using sounds from that. It gives me that warm lovely feeling when I'm trying to create something new. </div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)">When you think about it it's also my responsibility. I didn't deserve any of this - the internet, my laptop or all the information I could have never afforded with my modest financial status. So, I have to give something back.</div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div><font color="#444444" face="comic sans ms, sans-serif"><a href="http://www.conrad.com/ce/en/product/1172626/FM-Vintage-wireless-Franzis-Verlag-65228-14-years-and-over?ref=list" target="_blank">http://www.conrad.com/ce/en/product/1172626/FM-Vintage-wireless-Franzis-Verlag-65228-14-years-and-over?ref=list</a></font><br></div><div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"></div><br>
<div style="font-family:'comic sans ms',sans-serif;font-size:small;color:rgb(68,68,68)"><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 14, 2016 at 6:34 AM, Joseph Gentle <span dir="ltr"><<a href="mailto:me@josephg.com" target="_blank">me@josephg.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Yeah this goes back to the old 'three types of crypto tokens':<br>
<br>
- What you know (a password)<br>
- What you have (an rsa token, or a phone with google authenticator)<br>
- What you are (fingerprint, retina scan)<br>
<br>
Any new crypto system essentially boils down to some combination of<br>
those things. If you're using a CD, you've invented a new kind of<br>
crypto token (what you have). If you're remembering which youtube<br>
video is your key, you're using a (pretty weak) password (what you<br>
know). Still very cool though, if you can play it and have an embedded<br>
device hear the recording. It'd also be very cool to have a little<br>
crypto token that plays what sounds like static, and then have your<br>
computer / phone / whatever unlock when it hears the 'right'<br>
static-sounding audio clip.<br>
<br>
The cool thing about audio (for me) would be doing voice<br>
fingerprinting. "My name is my passport. Verify me"<br>
<a href="https://www.youtube.com/watch?v=-zVgWpVXb64" rel="noreferrer" target="_blank">https://www.youtube.com/watch?v=-zVgWpVXb64</a><br>
<div><div><br>
On Thu, Apr 14, 2016 at 11:11 AM, Justin King-Lacroix<br>
<<a href="mailto:justin.king-lacroix@cs.ox.ac.uk" target="_blank">justin.king-lacroix@cs.ox.ac.uk</a>> wrote:<br>
><br>
> On 10 April 2016 at 10:27, Mihai Ionut <<a href="mailto:c.ionutmihai1@gmail.com" target="_blank">c.ionutmihai1@gmail.com</a>> wrote:<br>
>><br>
>> Hi, I am a 21 years old software engineer from Bucharest, Romania<br>
>> passionate about programming, robotics, cryptography and Artificial<br>
>> intelligence.<br>
>> For the past two months I've worked on a new encryption application based<br>
>> on sounds. It allows users to encrypt their files (AES) using an audio<br>
>> input.<br>
><br>
><br>
> There's a lot of coolness in this idea. You might want to read up on the use<br>
> of sound card inputs as sources of entropy for random number generators.<br>
><br>
>><br>
>> The users have three options : they can generate their own WaveKey, they<br>
>> can use an exiting audio file (your favorite song from 1990's stored on a<br>
>> CD) or to use an online audio source - now I'm only focused on YouTube. You<br>
>> simply visit an YouTube video, select the time sequence, generate you<br>
>> WaveKey and encrypt your file. After that the key self-destructs.<br>
><br>
><br>
> While the idea isn't a bad one in principle, it means you now need to treat<br>
> the relevant YouTube link / song name with the same care as a cryptographic<br>
> key.<br>
> Also, YouTube knows your key.<br>
><br>
>><br>
>> Of course I've taken into account the obvious attacks - like the ones<br>
>> regarding recording when the users create their WaveKeys (I've worked on a<br>
>> custom printed circuit board with an integrated microphone and a small<br>
>> storage USB drive) or, in the case of the YouTube source your search history<br>
>> (We have Sandboxie and I'm pretty sure I can strike a deal with them).<br>
><br>
><br>
> What you haven't considered is that everyone on the network who can observe<br>
> your YouTube search history now potentially knows your key. Sandboxie only<br>
> prevents your browser from keeping its history on your hard disk; any traces<br>
> you leave on the network -- such as in YouTube's access logs (you weren't<br>
> logged in as yourself when you viewed it, right?) -- are, by nature, not<br>
> eraseable in this fashion.<br>
><br>
> On the flip side, generating your own WaveKey also seems problematic: on the<br>
> one hand, you want to filter as much noise as possible out of the audio<br>
> coming into your application, so the key generation is repeatable ie you can<br>
> sing the same song into the same mic again on a different day and decrypt<br>
> your files. On the other, you're throwing away a lot of entropy that way,<br>
> potentially making it easier to just brute-force the key.<br>
><br>
> If you solve this problem using a USB drive (or similar) connected to a<br>
> microphone to store the 'authoritative' copy of the recording, and reuse<br>
> that, we're now back to the usual key-management problem, only your key is<br>
> an unwieldy sound recording.<br>
><br>
><br>
> This idea is cool. However, I believe these issues need to be fixed or<br>
> mitigated before it can be put to practical use.<br>
><br>
> </$0.02><br>
><br>
> J<br>
><br>
><br>
</div></div>> _______________________________________________<br>
> Messaging mailing list<br>
> <a href="mailto:Messaging@moderncrypto.org" target="_blank">Messaging@moderncrypto.org</a><br>
> <a href="https://moderncrypto.org/mailman/listinfo/messaging" rel="noreferrer" target="_blank">https://moderncrypto.org/mailman/listinfo/messaging</a><br>
><br>
</blockquote></div><br></div>
</div></div></div><br></div>