Hacker News Reader

Comment by londons_explore | Hacker News Reader

I want "lifetime crypto". Ie. I can encrypt a message today and throw away the key, and not have anyone able to decrypt it in my lifetime.

No cryptosystem available today gives me confidence I have that.

View on HN

A one-time pad certainly does.

Confidence is subjective; personally I would gladly hedge my entire net worth against ChaCha20 ever being broken.

A one time pad requires a randomly generated pad. I don't have confidence that todays random number generators won't be found in the future to be predictable, especially over long runs as required for a one time pad.

It's not one-time pad encryption if you use data from a PSEUDO-random number generator. “One-time pad encryption” only applies when a true random stream is used as key, otherwise it's just a block cipher with a particularly inconvenient way for the user to store the key.

Or are you claiming that there's a risk in the future someone will find how to predict what output true random generators produced when they generated the key?

You can generate a secure random bitstream by flipping a coin. To eliminate bias, use the von Neumann procedure: flip the coin twice; if the results differ, use the first; otherwise, try again. If you're paranoid about snooping, go out into the woods or make a Faraday cage or something.

Without explaining why you have no confidence, you appear to have no idea what you are talking about

Reply on news.ycombinator.com