Also One-Time-Pad is uncrackable and dead simple to program and you can do it with pen and paper. The cat's out of the bag for the baddies.
You can't blame someone for not knowing what they don't know, but lawmakers are supposed to enact laws based on the benefit for their citizens. Seems not to be the case here.
Am I missing something?
Your pre-shared OTP can be a rack of 8TB hard drives delivered to an embassy by the Marine Corps which covers a whole lot of documents and media before it's exhausted.
After exchanging keys and pads in person, plug the device into a computer like a flash thumbdrive, and (with hypothetical software support) both people can now use the keys for end-to-end encryption without having to worry about authentication, and a utility could perform OTP while keeping track of how much random pad is remaining. If they want more pad, leave the devices plugged in longer. The actual encryption should be performed on the device, so the host computer never sees the keys/pad.
As long as crypto is hard to use, people will rely on centralized men in the middle. A key chain dongle that you could simply connect to your friend's dongle for a few seconds (or longer, if desires) is easy. Instead of trying to solve the entire authentication problem with PKI or web-of-trust, you let people solve the authentication problem themselves, using the social skills they already have. Yes, this isn't useful for communicating with someone you cannot meet physically; use some other solution for those situations.
(Imagine if this became popular and you could simply go to the local branch of your bank and plug your crypto dongle into a kiosk that generates a few months worth of random pad data so all of your online banking is secured by OTP)
[1] OTP requires truly random data, which probably requires some type of hardware entropy generator. Perhaps something like this: http://holdenc.altervista.org/avalanche/
Yubikey fits pretty close, I think. What purpose would you need it to be battery powered if it's USB?
The Yubikey has similar storage features and is the perfect size and shape. Unfortunately, it's missing the main feature I'm talking about: easy inter-device communication.
> What purpose would you need it to be battery powered if it's USB?
It needs to be self powered because
>> The key feature of the device is that touching two of the devices together
I want people to be able to protect their communication with someone simply by meeting them in person and touching their USB crypto devices together. It should be a device someone stores on their person along with their other security devices like their house/car keys. The goal is to make the crypto easy so the individual can use it in situations where they already solved the authentication problem. If exchanging keys with someone depends on something complex like a computer or phone, a lot of people won't use it.
I've mentioned this before, but I'd like to write a children's book that teaches one-time-pads. The book ends with little Jimmy getting hauled away by the feds for doing illegal math. Fun for children and parents!
The point of course, is to make clear how futile encryption restrictions are, and to perhaps make people wonder if it's really "the land of a free" when a child can commit a crime by doing some math. Fortunately, I think we're still a ways off from encryption being a crime.
I absolutely love this. Animal Farm comes to mind.
Please write this, our descendants need those echoes from the past.
In this case, you'd only need the asymmetric encryption to distribute the one-time pads.