frank miller’s codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · lots of google and google books...

8

Frank Miller’s Codebook Steven M. Bellovin http://www.cs.columbia.edu/~smb

Upload: others

Post on 14-Jun-2020

18 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

"

Frank Miller’s Codebook Steven M. Bellovin

http://www.cs.columbia.edu/~smb

Page 2: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

2

Page 3: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

Miller’s Superencipherment – What is This?

3

Page 4: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

This is a One-Time Pad!

4

The one-time pad is believed to have been invented in 1918 by Gilbert Vernam (Bell Telephone Laboratories) and Joseph Mauborgne (Head of U.S. Army Signal Corp Research and Engineering)

1882? Did Vernam or Mauborgne know Miller?

Page 5: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

Desperately Seeking the right Frank Miller

  In the preface, the author claims 16 years of banking experience in 1882 – sounds like a post-(U.S.) Civil War career

  Look for 19th century Sacramento bankers named “Frank Miller” (not many banks there then), especially those who served in the Civil War

  Lots of Google and Google books searches; lots of searching digitized newspaper archives; lots of email with military historians

  Check census records – only two people named “Frank Miller” in Sacramento in 1880; one was a banker; the second a “laboror”. The other data on the banker fit very, very well – and a relative compiled a genealogy book in 1987 and sent it to Google Books

5

Page 6: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

Who Was Frank Miller?

•  A prominent Sacramento banker and founding trustee of Stanford

•  During the Civil War era, worked as a clerk on anti-fraud and Lincoln’s assassination investigations

•  He never met Vernam; he probably didn’t meet Mauborgne

•  He almost certainly met Parker Hitt in 1907, under circumstances that made a discussion of codebooks quite plausible

•  Hitt was Mauborgne’s mentor and colleague – and was the first to say that for security, a key should be as long as the plaintext (1914)…

But – no proof that Hitt heard about this cipher from Miller

6 (From U. Mich Library)

Page 7: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

Conclusion and Open Issues

Miller clearly invented the one-time pad 35 years before Vernam and Mauborgne. But did his work have any lasting effect?

  Do I have the right Frank Miller? I have no smoking guns.

  What in his background led him to create that cipher?

  Did he explain his idea to Hitt; if so, did Hitt have a (vague, subconscious?) memory of it in 1912 when he formulated his maxim?

  Does the evidence exist for any of this?

7

Thanks to: many librarians; also Roy Frostig, David Kahn, David Gaddy, Norman Polmar, Edgar Raines, Rebecca Raines, Betsy Rohaly Smoot, Bill Shurtleff. Errors from: me.

Page 8: Frank Miller’s Codebooksmb%c2%a0%c2%a0%c2%a0%c2%a0… · Lots of Google and Google books searches; ... memory of it in 1912 when he formulated his maxim? Does the evidence exist

For More Information

CS Department Technical Report CUCS-009-11

Frank Miller: Inventor of the One-Time Pad

http://mice.cs.columbia.edu/getTechreport.php?techreportID=1460

8

Encryp’on, Security, and Privacysmb%c2%a0%c2%a0%c2%a0%c2%a0… · Examples l Incorrectly padding a short message to match the encryp’on algorithm’s requirements has resulted

Internet Security: Then and Nowsmb%c2%a0%c2%a0%c2%a0...13 SSL To some extent, a fig leaf: “it's safe to shop here, because your traffic is encrypted” 99.999% of consumers don't

FORMAT : A0 C1 C2

Introduction to Cryptography, Part IIsmb%c2%a0%c2%a0%c2%a0%c2%… · Homomorphic Vs. Non-malleable •Homomorphic encryption ... •How many people need to be in a room for the probability

The Crypto Warssmb%c2%a0%c2%a0%c2%a0%c2%a0...The American Black Chamber The US originally did little of this, but learned rapidly during World War I (During the Civil War, the Union

Employment and Computers - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0... · Alcatel “merged” with Lucent; Nokia is buying the new ... remained a monopoly—and didn’t drop in price

Final Review - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%a0… · Final Review The Test Conditions Format Material Limits Memory and Virtual Memory Paging File Systems Permissions Device

Дослідження популяційних характеристик Viviparus viviparus ...eprints.zu.edu.ua/12699/1/%D0%A0%D1%9A%D0%A0%C2%B0%D0%A0%D1%96… · На вікову

ControlCenter2smb%c2%a0%c2%a0%c2%a0...MC3764 CAP (Section 4.2). The CAP will provide the same multiple code population and limited-try fea- tures as the MCCS, but the W82 will not

C2 0 increase impact through google apps

Voluntary Disclosuressmb%c2%a0%c2%a0%c2%a0%c2%a0...update letting friends know that his unit was preparing to go to a West Bank village near Ramallah: On Wednesday we clean up Qatanah,

The Cybersecurity Challengesmb%c2%a0%c2%a0%c2%a0%c2%a0...The Problem “Our first observation is that we are hard pressed to say that cyberspace is more secure than it was 35 years

Identity, Security, and Privacysmb%c2%a0%c2%a0%c2%a0%c2%a0%c2%a0/tal… · Reputation should adhere to the real identity A bad guy should not be able to discard a bad reputation by

Biometrics; Authentication as a Systems Problemsmb%c2%a0%c2%a0%… · · 2013-09-26the problmes are likely to remain difﬁcult issues for system designers? Steven M. Bellovin

Practical Issues with Intrusion Detectionsmb%c2%a0%c2%a0%c2%a0%c2%a0... · 2006. 11. 14. · Extrusion Detection Simple Logging Log Files Finding Compromised Hosts 3 / 42. Locations

Databases and the Lawsmb%c2%a0%c2%a0%c2%a0... · or more databases Steven M. Bellovin February 11, 2010 4. Scale • Vastly more data is in machine-readable form • A lot of data

Wiretapping and Surveillancesmb%c2%a0%c2%a0%c2%a0%c2%a0… · They know you rang a phone sex service at 2:24 am and spoke for 18 minutes. They know you called the suicide prevention

Computers, Society, and the Lawsmb%c2%a0%c2%a0%c2%a0%c2%a0... · 2017-04-13 · Recording Electronic) voting machines and Internet voting ... lUse machine learning to make predictions

Preparing Your Google Cloud VM for W4187smb%c2%a0%c2%a0%c2%a0%c2%a0… · 7. Select No for \Please email me updates ..." unless you actually want email updates on new o erings. 8

Software Complexitysmb%c2%a0%c2%a0%c2%a0%c2%a0%c2%a0/tal… · Why Technologists Oppose Golden Keys • It has nothing to do with dislike of the FBI or the NSA • Technologists can

Complex Access Control - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%… · hTop, Planesi and hSecret, Subsi are not comparable, Steven M. Bellovin September 14, 2010 30. Using this Scheme

Doing History in the Internet Agesmb%c2%a0%c2%a0%c2%a0... · the Freemasons (1829), the Templars (1867), and the Ku Klux Klan (1872) Neither of these two meanings is listed in the

STAINES AP-PLANS PHDD C2-A0 HVAC MECH

Año 20 Saltillo, Coahuila 10 de junio de 2019 Número 241 ...transparencia.saltillo.gob.mx/Articulo%2028/VII.%C2%A0%C2%A0%C… · Asignación de nomenclatura al Bulevar El Minero,

C2%A0… · Created Date: 12/11/2018 2:39:08 PM

Web Server-Side Securitysmb%c2%a0%c2%a0%c2%a0%c2%a0… · Most interesting web sites use server-side scripts: CGI, ASP, PHP, server-side include, etc. Each such script is a separate

Risks of Computers: What do we Do? - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0... · The Bloomberg Crash ... ther traders said they depended on Bloomberg chat so heavily that they weren’t

Wireless Security - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%a0… · Wireless Security Wireless Security Conﬁdentiality Integrity Wireless Architecture Access Points Which AP? The

Protecting the Internet Against Large-Scale Passive Monitoringsmb%c2%a0%c2%a0%c2%a0%c2%a0… · Types of Attack Passive Attacker just listens Active Attacker transmits messages; may

Steven M. Bellovin œsmbsmb%c2%a0%c2%a0%c2%a0... · APT Apt: An Arctic monster.A huge, white-furred creature with six limbs, four of which, short and heavy, carry it over the snow

Case Studies in Access Control - cs.columbia.edusmb%c2%a0%c2%a0%c2%a0%c2%a0%c2%a0/cl…Situations Case Studies in Access Control Joint Software Development Situations Roles Permissions

DISTRIBUTION ONLYsmb%c2%a0%c2%a0%c2%a0%c2%a0... · 2017. 5. 29. · 3-4. mum m- ” 4..mm.mm.m . we ... In nuclearweapons that areinherently one-point safe,‘nuclearsafety is dependent

Toward Usable Access Control for End-users: A Case Study ...smb%c2%a0%c2%a0%c2%a0... · evaluating how Facebook users utilize the available privacy controls to implement an access

A Introduction to Modern Cryptographysmb%c2%a0%c2%a0%c2%a0...on the history of cryptography. The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography, Simon

แนวทางการบ าบัดรักษาด้วยเมทาโดนระยะยาวe-lib.ddc.moph.go.th/images/pic_book/68.%C3%A0%C2... · แนวทางการบ