integrating GPG with deniable steganography

Marlow, Andrew (London) MarloAnd@exchange.uk.ml.com
Tue Mar 20 15:40:06 2001



> -----Original Message-----
> From: Florian Weimer [SMTP:fw@deneb.enyo.de]
> Sent: Tuesday, March 20, 2001 2:35 PM
> To: Marlow, Andrew (London)
> Cc: gnupg-devel@gnupg.org
> Subject: Re: integrating GPG with deniable steganography
>
> "Marlow, Andrew (London)" <MarloAnd@exchange.uk.ml.com> writes:
>
> > [Marlow, Andrew (London)] For steg to work we must assume that
> > Wendy has
> > knowledge of all steg algorithms. Otherwise its just security
> > through obscurity.
>
> I think no steganography algorithms with this property are a publicly
> known today. Steganography is about at the level cryptography was
> several hundred years ago.
[Marlow, Andrew (London)] How depressing. Well I would rather not use steg than use a form of steg that is security-through-obscurity (STO). The trouble with STO is that is gives an ill-founded sense of well-being. STO does not work. I still think that deniable steg is possible and other posts on this thread seem to agree. But it is hard and we are in the early stages of exploration.