Slashdot Mirror


Encrypt Information In Images Without Distortion

Nomikos writes "C|Net reports: Researchers have created a new way to encrypt information in a digital image and extract it later without any distortion or loss of information. A team of scientists from Xerox and the University of Rochester said that the technique, called reversible data hiding, could be used in situations that require proof that an image has not been altered."

31 of 234 comments (clear)

  1. This has been done forever. by packeteer · · Score: 4, Funny

    People have been doing this for some time. You simply print out the data. Take a photo of it. Scanthe photo. Send the photo. No distortion of the image with the data on it.

    --
    unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
    1. Re:This has been done forever. by Valar · · Score: 5, Interesting

      This isn't really feasible if you are trying to extract the data losslessly. The original image file will not match with the extracted file. There is loss in the printing (ink smudge, low resolution printer), loss in the photography (ambient light, noise on the film, thumb in front of lens) and loss in the scanning process. As a result, even if the scanned image is in the same format as the original, there is still loss.

  2. porn by Transient0 · · Score: 5, Funny

    So I'll finally be able to verify whether or not that's a REAL picture of Britney Spears getting it on with a dalmation?

    SWEET!

  3. Encryption? by heliocentric · · Score: 5, Informative

    Isn't it more like steganography? I mean, ok, so we can encrypt the message you store using steg. but are we confusing the two?

    --
    Wheeeee
    1. Re:Encryption? by saforrest · · Score: 4, Informative

      Basically it is a form of steganography. The only thing unique is that the information isn't an arbitrary message, but just enough to label the image.

      This is called digital watermarking.

    2. Re:Encryption? by nuntius · · Score: 5, Informative

      From reading the paper (college access to IEEE publications sure is nice), the researchers outline two forms of reversible data embedding.

      Type I simply embeds the data into the spectrum of the image and uses modulo addition as necessary to prevent overflow. Unfortunately, this causes "salt-and-pepper artifacts" because this sometimes affects the most significant bits in a pixel's representation.

      Type II uses the traditional method of overwriting the least significant bits or high-frequency coefficients in the image (depending on image encoding).

      What this paper does is describe a method that employs Type II encoding and saves the overwritten bits by compressing them and inserting into the embedded data stream. Unlike simple Type II encodings such as always using the lowest two bits, this paper varies the number of bits which are used in each byte. This value is determined according to their compressibility and other parameters in the image. By doing this, the paper obtains a more efficient tradeoff between storage and distortion.

      The journal article is "Reversible data hiding" in IEEE Internation Conference on Image Processing, 2002, volume 2, pages 157-160 http://ieeexplore.ieee.org/servlet/opac?punumber=8 052

  4. Signed Hash by notestein · · Score: 4, Insightful

    How is this better than a signed hash of the image?

    1. Re:Signed Hash by jonbrewer · · Score: 4, Informative

      "How is this better than a signed hash of the image?"

      A signed hash can be separated from an image, while this type of watermarking cannot.

    2. Re:Signed Hash by packeteer · · Score: 5, Insightful

      Thats where the encryption comes in. The watermark can only be reversed on the correct machine. Think like pgp, only the person you want to can read the email you send. They plan to work this into hardware. They would probably give the hardware a unique key and have the picture creator encrypt so only that key can open it. This way if you say wany a secure presentation you can set it so only the one projector in the white house can read it without the watermark.

      --
      unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
  5. I don't get it... by RomikQ · · Score: 5, Interesting
    The new technique builds on previous methods but modifies the lowest levels of pixel values using data-embedding algorithms. It allows authorized viewers to extract the embedded authentication message while also removing any distortions created by the embedded information

    So while the encrypted data is in the image, the picture is still distorted, it's only when you take the data out, then you get the original. What's the point of that??? I mean that was what it was like before, wasn't it?

    By the way, adding plain text to the end of a jpeg file doesn't alter the image in any way, no matter how much you add. So you could encrypt the text you want and add it at the end and there you go, lossless data encryption in images :). Do I get a Nobel prize now?

    --
    Join the elite! Post at score:2! Ghostwheel is online.
  6. Is it really encryption? by verch · · Score: 5, Informative

    Sounds like 'encrypt' isnt exactly the right word here. Maybe 'encode' would have been better. From the very tech light article it seems that this is a watermarking technique which somehow embeds the watermark with no distortion of the image whatsoever. Traditional watermarks distort the image, albeit usually not noticeable to the casual naked eye.

  7. Don't let Bin Laden read this... by TheGreenGoogler · · Score: 4, Interesting

    As I recall, the FBI had evidence that Bin Laden was using steganography to conceal messages in photos...

  8. Re:Holy Cow!! This Is Awesome! by packeteer · · Score: 5, Interesting

    They are refering to water marks. This is not about "encryption" or even "stenography". The problem is proving a document is original. Normally you put and ugly water mark on the image. With this techinque you can put the water mark in but you also put in data "securly encrypted of course" about how to get the water mark out.

    Sheesh i feel dirty now that i have summed up the whole article because people post before they read it.

    --
    unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
  9. Something doesn't sound right by plierhead · · Score: 4, Interesting
    The article seems utterly light on some key information (about which file formats etc), but simple information theory suggests that this will only work on less-than-optimal image formats.

    Any optimal image format will result in a file only just big enough to store the image and no bigger - and therefore it will not be able to store any additional data without reducing the image quality in some way.

    Without any further information available, could it be they are just talking about taking advantage of flaws in some given format such as jpeg ?

    --

    [x] auto-moderate all posts by this user as insightful

  10. once again all the early posters got it wrong by intuition · · Score: 5, Insightful
    This is steganography with the original image hidden in the steganography as well. Hence the term, "reversible data hiding." That way, not only does the current image hold the data you are sending, but you get a copy of the original image (before steganography) as well.

    The fact that every poster so far hasn't seen this fact, is a disturbing reminder of what the average poster on slashdot has become.

    does anyone have any suggestions as to where to go next?

    1. Re:once again all the early posters got it wrong by cei · · Score: 4, Interesting

      Nowhere in the source article does it say the encoded values are of the original image. It specifically refers to an "embedded authentication message."

      While your message has been modded to +5, it is, in fact, wrong.

      --
      This sig intentionally left justified.
  11. My bullshit detector is on yellow alert by Crag · · Score: 5, Insightful

    "For instance, a digital camera that carries the new algorithms could be used to gather forensic evidence for use later in a courtroom. Any subsequent manipulations of the pictures could be detected, and the area where they occurred could be pinpointed."

    Whatever the camera is doing at the scene of the crime could be faked in a lab. Even if each camera has its own PGP/GPG key, the picture is only as reliable as the security of the camera and the key.

    What they should do is have the crime scene photographer and his superior digitally sign the images at the crime scene. This would remove the image format from the equation and make the data and the image as secure as the keys of the people involved.

    1. Re:My bullshit detector is on yellow alert by ChristopherLord · · Score: 5, Informative
      Canon does provide support for a "Data Verification Kit" on its latest 1Ds camera. No word on how secure it is, etc.

      from here:
      "Finally with a nod toward law enforcement the EOS-1Ds is the first digital camera that offers the ability to verify that images are unaltered originals using the Data Verification Kit DVK-E1, consisting of a dedicated IC card and card reader, together with software for Windows 2000/XP. This package is available to verify that EOS-1Ds image files are absolutely unaltered. "

  12. In other news... by the_other_one · · Score: 5, Funny

    The RIAA and MPAA have sponsored new legislation to make images illegal on the internet in the United States. Images have been known to carry illegal circumvention devices such as DECSS. Thus images in themselves are also potential circumvention devices under the DMCA.

    --
    134340: I am not a number. I am a free planet!
  13. Obligatory DMCA Reference by no+soup+for+you · · Score: 4, Funny

    Do not attempt to reverse engineer or theorize about this encryption. They say it's encrypted, that's enough for you.

    --
    If you blog it...
  14. Careful what you wish for by Anonymous Coward · · Score: 4, Insightful
    While this approach has many potentially socially useful applications (e.g., getting data out of censorship regimes without getting caught), it also has a more sinister application.

    If you can "watermark" (not sure if that is technically the right term for what these folks are proposing) something in such a way that it is undetectable to the viewer, then that implies that you can attach a unique ID to any given file -- which is exactly what SDMI attempted to do (and failed, thanks to Prof. Felten's work at Princeton).

    But didn't Felten's paper essentially demonstrate that this sort of perfect information hiding was essentially impossible theoretically? If so, then the Xerox/Rochester guys are wrong. If not, then Felten's paper is wrong and it is possible to insert permanent SDMI-style watermarks in files. I sure hope it's the former and not the latter.

    Perhaps this new approach only has to do with psychovisual tricks and not psychoacoustic stuff -- in which case I suppose they could both be right. Anyone more knowledgeable about this care to comment?

    -Garth M.

  15. It DOES distort the image!!! by wirelessbuzzers · · Score: 4, Informative

    ... just reversably, so you can get the original back later. And it isn't watermarking! They use only the LSB, so it won't survive recompression, printing, whatever. You can't encode anything without the image without distorting it, except by permuting the color tables. But that is easily detected and can't store much data anyway.

    --
    I hereby place the above post in the public domain.
  16. Re:New? by the+eric+conspiracy · · Score: 4, Insightful


    I've had that technique for years. It's called a checksum.

    All a checksum does is provide a playground for anyone with a little Linear Algebra background.

    Now if you are talking about message digests based on hash function, like SHA or HMAC you are on firmer ground.

  17. Re:Holy Cow!! This Is Awesome! by wirelessbuzzers · · Score: 4, Informative

    Quoth the parent: They are refering to water marks. This is not about "encryption" or even "stenography". The problem is proving a document is original. Actually, it looks like steg to me. Because to prove a document is unaltered without altering it, you just sign it with your private key. This can't be any better: someone could remove the watermark (it's reversible), alter the message, and "authenticate" that, unless there is a digital signature embedded in the image, in which case why not just attach it to the file? Although it would appear that the original paper is not online, so we can't be sure.

    --
    I hereby place the above post in the public domain.
  18. This is great! by seanadams.com · · Score: 5, Insightful

    Researchers have created a new way to encrypt information in a digital image and extract it later without any distortion or loss of information.

    So, if I can add some information to an image without any loss of information in the original, then I don't see any reason why I couldn't use this technique repeatedly, ad inifinitum, on the resulting image. Therefore, they have created a way to turn any one of my pr0n jpegs into an unlimited storage device.

    This really changes everything we thought we knew about computer science and information theory. What an incredible discovery!

  19. These watermarks vs. Digimarc watermarks by yerricde · · Score: 4, Informative

    This is called digital watermarking.

    But unlike Digimarc watermarks, this kind of watermark isn't designed to survive being sent through the analog hole.

    --
    Will I retire or break 10K?
  20. "Optimal" by fireboy1919 · · Score: 5, Interesting

    Have you studied any image compression theory? Have you heard of the famed graduate student method for fractal compression?
    Here it is
    1) Lock a graduate student in a room with an image and a huge collection of mathematical knowledge about fractals
    2) Tell him/her to compress the image by finding and modeling fractal patterns
    3) Wait four days...
    VOILA! 10000x compression is not unheard of with 1% or less degredation.

    Ever image format that we use today is sub-optimal. We don't even have a mathematical formalism to perfectly identify the entropy (i.e. information) encoded within an image (though we can make rough estimates) to determine the maximum compression. Also, consider than even given the techniques we have today, jpeg isn't the best thing out there, though it is the standard. jpeg2000 is better, and there are some even more highly sophisticated and accurate wavelet based approaches. If we can ever get the kind of computing power available to the supercomputers of today we can do even better by modeling our images using more complex basis functions than sinusiods and wavelets.

    Just one final note to sum up: finding optimal compression is definitely an NP-hard problem. Who knows what kind of stuff can be thrown in there without affecting much.

    --
    Mod me down and I will become more powerful than you can possibly imagine!
  21. Some more information I googled by sambo99 · · Score: 4, Informative

    This stuff is in the process of being patented

    The abstract of the paper (Reversible Data Hiding) is: "We present a novel reversible (lossless) data hiding (embedding) technique, which enables the exact recovery of the original host signal upon extraction of the embedded information. A generalization of the well-known LSB (least significant bit) modification is proposed as the data embedding method, which introduces additional operating points on the capacity-distortion curve. Lossless recovery of the original is achieved by compressing portions of the signal that are susceptible to embedding distortion, and transmitting these compressed descriptions as a part of the embedded payload. A prediction-based conditional entropy coder which utilizes static portions of the host as side-information improves the compression efficiency, and thus the lossless data embedding capacity"

    In case anyone is interested.

    --
    - Sam
  22. Steganography by Chris+Burke · · Score: 5, Insightful

    Well, you can blame the editor, but it's really the article's fault. What they're really talking about is lossless steganography, which is a neater trick. The idea is to hide data in a standard (eg. GIF) image, and be able to extract that data while at the same time preserving the entire image. For the applications they talk about (watermarking), the hidden information is encrpyted, which may be why that word showed up.

    I'm curious about their claims. Do they claim to be able to hide the data in an existing image format without image loss? For formats like GIF, it'd be tough, because compressed data (by design) lacks the redundant bits Information Theory demands before you can start cramming extra bits of data into the same space. They certainly wouldn't be able to guarantee that the image was without quality loss before removing and correcting for the watermark. ;)

    So I guess I'm not sure what they're claiming.

    Though I think for the applications they are stating, actual hiding of the data isn't the point. You don't care if people know that there is some data hidden in the image, you only care that they can't read it or forge it. It'd be much easier then, because you could make a new file format. Shit, all you'd have to do is take a .PNG, stick an encrpyted md5 sum at the back, and call it (S)ecurePNG.

    Which isn't a bad idea, actually... You could do some of the things they talked about.

    For digitizing contracts, both parties would put an md5 sum encrpyted with their private keys in the image of the contract. Anyone (e.g. the Court) can read the md5 sums and verify that a copy of the contract is legitimate.

    For verifying forensics photos, the camera they used would have to encrypt all the photos it takes with a private key (the Courts, again?) not known to the police officers who do the work. I think this is unworkable.

    The only problem with both of these ideas is that they are only worth as much as you can trust that the private keys have not been compromised. If you're going to be convicting people on the basis of signed police photos, you'd better be damn sure that the police couldn't have possibly discovered the private key hidden in the camera's hardware.

    But like I said, this doesn't involve hiding data in a photograph. I'm just wondering what the -purpose- of the steganography was actually supposed to be. Why is it important that the information be -concealed-?

    --

    The enemies of Democracy are
  23. Misleading title. by KFury · · Score: 4, Insightful

    The title "Encrypt information in images without distortion" is really misleading. It suggests (err, states) that the sego process doesn't change the image. It certainly does. The only interesting bit is that it's reversable.

    So while it's not lossy in the final analysis, and the original version can be reclaimed, it does actually distort the image, while the hidden message is contained within.

  24. Zero Distortion HOWTO by Effugas · · Score: 4, Insightful

    Yes, I originally thought it was impossible.

    Then I sat down, and realized what's going probably on here (the CNet article didn't specify, and I didn't think to track down the original work. Foo on me. So I'm pulling this out of my proverbial ass.)

    Perfectly random images are indeed impossible to add data to without creating some form of irreversable distortion. Suppose you had a "remove transformation" mask embedded in the included transform. This mask itself would take information, which would then need to be added to the transform, which would increase the size of the transform, thus necessitating a bigger mask, ad nauseum. So you could never embed the reversal instructions.

    However, photographs are not perfectly random. Along the light wavelengths that nature selected for humans to sense, significant patterns exist -- edges, gradients, shapes, and so on. Though precise intensities eventually hit perfect randomness at absolute sensitivity, digital photographs (even without JPEG) quantize imagery into 8 bits per channel -- 24 bits total. So those patterns we see actually create significant regions of reduced entropy -- less information in the image than there is otherwise room for.

    And that's the key -- because once there's extra capacity, we can embed both some message and the means to remove that message in the extra space. Then it's just a matter of using one of a thousand ways to share the secret across all the low entropy regions of the image, and you're done.

    No, it doesn't violate information theory. Yes, it's mildly cool. No, it's nothing like a public key steganographic system -- there's nothing inherent about the system that prevents unauthorized removal, or even unauthorized addition of the watermark. But it's a useful adjunct -- concievably, it'd be at the heart of a watermarking system that fingerprinted audio and video in low-entropy segments, then removed the fingerprint before it hit the d/a converter.

    I'm pretty sure the strategy extends to floating point representations as well, though there's likely much less compressability due to noisy capture circuitry and higher raw entropy in the signal.

    Yours Truly,

    Dan Kaminsky
    DoxPara Research
    http://www.doxpara.com