Privacy With a 4096 Bit RSA Key — Offline, On Paper

HavanaF writes "Online backup is practical, but can it offer any privacy? The Dutch security company Safeberg developed an Offline Private Key Protocol, with an asymmetric key scheme. The protocol demands that the private (decryption) key be stored away from the 'source' computer, which presumably is 'too vulnerable.' The catch is that the private key needs to be fairly large to be secure: a 4,096-bit RSA key should suffice for some years. But how to store an 800-character key offline? Safeberg introduces a machine readable paper key, with the 4k-bit key crammed in a giant 2D Datamatrix barcode. This video on key strength tells the story."

Comments

What Happens When ...

[WrongSizeGlass]

... you fold the paper your 2D key is on? Tears, that's what. Tears.

Re:What Happens When ...

[mpapet]

Bar codes printed on media of all kinds are generally quite robust and not error prone. The printing device does not need to be special in any way. The reader does not need to be special in any way. Print the key on acid-free paper using a laser printer and store it for a looong time. I'll leave it up to the slashdot tifosi to declare how long it would last in a bank vault.

Some nice ways to encode keys and store it as a symbol on paper here: http://www.adams1.com/stack.html

Symbology is very non-sexy knowledge, but valuable in logistics.

Re:What Happens When ...

[dgatwood]

Reading numbers is more error prone. With the bar code, there are presumably lots of check digits and other such loveliness encoded into it.

As for folding it, what happens? Probably nothing. There are usually CRCs (or similar) and lots of other stuff in those 2D bar codes. This particular scheme, Data Matrix, is apparently highly redundant, allowing full recovery of the data even if (up to) 30% of the bar code is destroyed.

http://www.tlashford.com/TLA/pages/Basic_sym/Symbol_overview.htm#DATAMATRIX
http://en.wikipedia.org/wiki/Data_matrix_(computer)

Re:What Happens When ...

[kill-1]

The paper key seems to contain 4x4 x 22x22 = 7744 bits. So can't tear it in half but almost.

Re:What Happens When ...

[maxwell demon]

Reading numbers is more error prone. With the bar code, there are presumably lots of check digits and other such loveliness encoded into it.

There's no reason you cannot insert check digits into the number as well.

Re:What Happens When ...

[GaryOlson]

...paper is just silly. It is less "safe" (as opposed to secure) than a USB key...

Paper has hundreds of years of technology development behind it; what is the oldest USB key you have? Technology easily and readily exists to store quality archive paper nearly indefinitely in temperature/light/humidity controlled environments.

I might even guestimate bar code technology will disappear long before a properly created and stored paper archive.

Re:What Happens When ...

[Yvan256]

you can recover the data from the entropy in the universe.

I tried do to that and all I got was "42".

Another plausible scenario I have to watch out for

[Merc248]

Guy holding knife and laxatives: "Poop the paper! Poop it now!"

key exchange

[akirapill]

I'll fax you a xerox of my public key. Is analog the new steam punk?

How is this any more secure

[Monkeedude1212]

Than a 4096 Bit RSA Key that is stored on a standalone computer?

Re:How is this any more secure

[DragonWriter]

Than a 4096 Bit RSA Key that is stored on a standalone computer?

If you use the standalone computer for anything but storing the key, or fail to physically secure the standalone computer from access (separate to any physical security on any computer on which data resides that is secured with the key) it is obviously more secure to keep the key on paper, physically secured in something that isn't opened except to access the key.

If you don't use the standalone computer for anything else, and have it separately physically secured, then for any reasonable use of the word "computer", it will probably be equally secure, and vastly less expensive to separately secure the key on paper, instead.

Perhaps the more relevant comparison is separately securing paper vs. separately securing long-term electronic storage media. The sheet of paper will probably be cheaper in any case (though the price difference drops if you are using inexpensive electronic storage media rather than a dedicate computer), and will likely be more likely to be practically usable to access data a longer time into the future. Though in this case, a key factor is making sure the paper has the key in a human-readable form as well as a machine-readable form, since long-term availability of tools to read any particular machine-readable format is an issue. If you use text in an OCR-friendly font, the human readable format and the machine readable format can be the same.

no thanks my Hard drive is too big

[Spy Handler]

Online backup is practical

not for my 1.5 terabyte HDD which is about half full.

Right now backing up from hard drive to hard drive takes forever (hours). How the fuck am I gonna back up to a remote server over the internet at 60 kbytes/sec?

Re:no thanks my Hard drive is too big

[toastar]

How the fuck am I gonna back up to a remote server over the internet at 60 kbytes/sec?

you can get about 17 MBytes/Sec with a 1.5TB through USPS

Don't use datamatrix

[GigsVT]

Datamatrix is the Gif of the barcode world. It has a bunch of patents covering it.

PDF417 does mostly the same thing, can be read with a laser (instead of an imager) and was designed to be open source and patent free from the beginning.

Re:Don't use datamatrix

[Kostya]

The wikipedia article on DataMatrix (http://en.wikipedia.org/wiki/Data_Matrix#Patent_issues) seems to imply it is unencumbered--perhaps I'm misunderstanding something?

Prior to the expiration of U.S. Patent 5,612,524, intellectual property company Acacia Technologies claimed that Data Matrix was partially covered by its contents. As the patent owner, Acacia allegedly contacted Data Matrix users demanding license fees related to the patent.

Cognex Corporation, a large manufacturer of 2D barcode devices, filed a declaratory judgment complaint on March 13, 2006 after receiving information that Acacia had contacted its customers demanding licensing fees. On May 19, 2008 Judge Joan N. Ericksen of the U.S. District Court in Minnesota ruled in favor of Cognex. The ruling held that the '524 patent, which claimed to cover a system for capturing and reading 2D symbology codes, is both invalid and unenforceable due to inequitable conduct by the defendants during the procurement of the patent.

Notably, since the '524 patent expired in November 2007, a ruling against Cognex wouldn't have affected current use of Data Matrix anyway. However, it would have established that use of Data Matrix prior to November 2007 could potentially be covered by the '524 patent.

Re:Don't use datamatrix

[dangermonkeyboy]

No offense, but this information is wrong. Data Matrix is completely unencumbered by patents. For one thing, it was released into the public domain by its inventor, and for another it's so old that even if there had been patents they would have expired by now.

There was one "IP" company that made some noise in 2006-2007 claiming to cover some of the underlying technology in their patent portfolio, but they were handed their hats in court. I followed the issue very closely, even stopping distribution of my Data Matrix open source project for a while, pending this outcome. But rest assured that Data Matrix is unencumbered by patents and safe to use in your projects.

Re:First Po..

[gadget junkie]

Hang on! let me get my giant barcode out of my pocket!

that reminds me of Robin Williams doing his Adam and Eve sketch....."Stand back honey, I do not know how big this can get!!"

Re:Another plausible scenario I have to watch out

[Merc248]

"Defecate thy papyrus!"

And this is practical, how?

[he-sk]

Do people actually use the systems they produce and sell?

Re:And this is practical, how?

[Arthur Grumbine]

Safeberg also announced that their official position is that "dog food tastes terrible".

Re:How much added security?

[owlstead]

Yes, whenever you use a key it becomes more vulnerable. This only adds security to the storage, not the use. It's amazing how many times this kind of thing is forgotten, e.g. when using an ultra-secure USB device on a computer with zero protection. It becomes even more "interesting" when you have to use the key in an automated system - obviously this design is not meant for continuous use :).

Ummmm....

[jemenake]

I'm not sure I grok this notion of not storing the key with the source machine. I mean... if I can get to the machine you backed up... I don't really need to get to the backup, do I? I've got fresher data right there in front of me.

Now, if you're really trying to protect some kind of historical record of how your data has progressed over time, then that would be a reason why access to the source computer still didn't get the intruder access to what you're trying to protect... but that's a very special case.

Dunno. Maybe I'm just missing the point.

Idiotic

[evilviper]

This makes absolutely no sense. Smart cards have been around for many years now. There, you NEVER give ANYONE or anything access to your private key. Challenge-response, one-time-passwords, tokens, etc, etc. Putting it on paper is LESS SECURE than sticking it on a thunb drive. Then at least it can't be stolen by taking a picture...

paperkey and libdmtx

[c_g_hills]

See http://www.mail-archive.com/gnupg-users@gnupg.org/msg10827.html.

The original paperkey software takes out the redundant key material for a smaller amount of data. You can restore the original key by combining the output with the public key.

To encode:

gpg --export-secret-key (thekey) | paperkey --output-type raw | dmtxwrite -e8 -f pdf > my_pdf_file.pdf

You can pass pdf, eps, svg, etc, to the -f option. Use 'dmtxwrite -l' to get a list of all supported image formats.

To decode:

dmtxread -N1 my_pdf_file.pdf | paperkey --pubring ~/.gnupg/pubring.gpg > my_new_secret_key.gpg

I'll save you some money

[dangermonkeyboy]

$ gpg --export | dmtxwrite --encoding=8 --format=PNG | lp

To be honest, I thought trusted paper keys were already common knowledge among geeks:

http://en.wikipedia.org/wiki/Trusted_paper_key

Re:In 2006, a guy recited Pi to 100000 places...

[Sir_Lewk]

Problem is, this is an RSA key, it can't just be any random string of bits, it has to be two very large prime numbers. Users won't be chosing a 4096bit key, it will be generated for them.

Re:Another plausible scenario I have to watch out

[Red Flayer]

I like a little alliteration in my catchphrases. How about:

Void thine vellum!
Oust thine onion skin!

And that's about all I can come up with.

Except maybe "Shit the sheet", but that doesn't sound as nice.