Is it possible to decide what is a gpg file?

Mario Castelán Castro mariocastelancastro at gmail.com
Fri Nov 20 03:36:06 CET 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

November 19th 2009 for gnupg-users at gnupg.org

IMO steganography should be mixed with cryptography to be secure.

As example: LSB in pictures (Unless you have a professional camera)
will be random (High entropy and no predecible). You can replace it
with ciphertext (Undistinguible from random noise) and no one will
note the difference.

Of course if instead of replace the LSB with direct ciphertext you put
an GPG encrypted file the magic numbers will prove than there is an
encripted message. It can't be decoded w/o the key but you can be
forced to give the key.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAksF/1IACgkQZ4DA0TLic4gcdwCeO4Pj4CNLNDfP3QmLbZFGT4nz
zJUAni/BqPbPJEEqJbOTg44EED5McgeK
=LFjl
-----END PGP SIGNATURE-----

Note: resent because the first wasn't sent to the mailing list.



More information about the Gnupg-users mailing list