Feeds

Japanese tune into quasar encryption

Randomness makes for secure comms

Application security programs and practises

Japanese scientists are proposing the use of random radio pulses emitted by quasars as "one time pads" for the encryption of sensitive messages, New Scientist reports.

Ken Umeno and his chums at Tokyo's National Institute of Information and Communications Technology reckon quasars could be useful in cryptography because "the strength and frequency of the radio pulses they emit is impossible to predict" - thereby making them truly random in contrast to computer-generated "pseudo-randomness" in which patterns will inevitably be revealed over time.

Umeno told New Scientist: "Quasar-based cryptography is based on a physical fact that such a space signal is random and has a very broad frequency spectrum."

Umeno's team proposes that the two parties wishing to encrypt - and subsequently decrypt - use "an agreed quasar radio signal to add randomness to a stream cipher - a method of encrypting information at high speed". Knowing which quasar to monitor and when would be the only information required to enable the secure communication. A third party without this knowledge would find it impossible to decipher the transmission.

Umeno cites international financial institutions, governments and embassies as possible users for the system. The advantages are, he says, that the method "does not require a large radio antenna or that the communicating parties be located in the same hemisphere, as radio signals can be broadcast over the internet at high speed".

The possible pitfalls? Markus Kuhn of the University of Cambridge noted: "It is easy to play tricks with reception antennas...an attacker could mimic a radio signal and gain a lot of control over the signal that the receiver can see."

Bruce Schneier of Counterpane Security chipped in: "This is interesting research, but there's no reason for anyone to use it in a practical application. Furthermore, this is a brand new idea. Why would anyone want to use something new and untested when we've already got lots of good cryptography?"

The Japanese researchers collected quasar signals using their own Very Long Baseline Interferometry antenna. They've filed two patents: one covering encryption and decryption of messages and a second "for generating digital signatures that can be used to match messages or files to a person". ®

Build a business case: developing custom apps

More from The Register

next story
Asteroid's DINO KILLING SPREE just bad luck – boffins
Sauricide WASN'T inevitable, reckon scientists
BEST BATTERY EVER: All lithium, all the time, plus a dash of carbon nano-stuff
We have found the Holy Grail (of batteries) - boffins
The Sun took a day off last week and made NO sunspots
Someone needs to get that lazy star cooking again before things get cold around here
Boffins discuss AI space program at hush-hush IARPA confab
IBM, MIT, plenty of others invited to fill Uncle Sam's spy toolchest, but where's Google?
Famous 'Dish' radio telescope to be emptied in budget crisis: CSIRO
Radio astronomy suffering to protect Square Kilometre Array
Bad back? Show some spine and stop popping paracetamol
Study finds common pain-killer doesn't reduce pain or shorten recovery
Forty-five years ago: FOOTPRINTS FOUND ON MOON
NASA won't be back any time soon, sadly
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Securing Web Applications Made Simple and Scalable
Learn how automated security testing can provide a simple and scalable way to protect your web applications.