OneTime icon indicating copy to clipboard operation
OneTime copied to clipboard

An open source encryption program that uses the "one-time pad" method.

Results 12 OneTime issues
Sort by recently updated
recently updated
newest added

I have downloaded [onetime-1.81.tar.gz](https://www.red-bean.com/onetime/onetime-1.81.tar.gz) and extracted the files. Executing `./onetime --intro` (with Python 3.7.0) produces File "./onetime", line 259 raise self.ConfigurationError, \ ^ SyntaxError: invalid syntax

Since https://github.com/kfogel/OneTime/commit/76c46de2efdd651846758e419f2ef35743b5968a pulling random data from `/dev/random` and using it as an directed by `onetime --pad-help` can result in `onetime` blowing up, as discussed in https://github.com/Homebrew/homebrew-core/pull/7258 with a random file...

``` # In other words, the real message (and its digest, described # below) sits somewhere along a slider surrounded by fuzz on # each side, and the precise amount...

You stated that the format of onetime that is being used is sensitive information and there I must be encrypted in the inner header. While this is not a big...

Detect any tampering with the ciphertext, or rahter with the entire content of the .onetime file. 1) If I remove the empty line after the offset indication and before the...

Reading through the code comments I'm having a hard time understanding exactly which random bytes you use in the message digest and what else, if anything, you do with them....

Reading through the code comments, it looks like you are including some information in the cipher text, which IMHO should not be there. c.f. " FFHHTTRRRR******-------------------------------------DDDD******* " I think it...

Would it make sense to optionally make self._default_fuzz_source_length and self._default_fuzz_source_modulo determined by the length of the plaintext ? Thus the fuzz could be always between 0 and a fixed percentage...

Since one-time pads offer information-theoretically secure encryption, what do you think about adding an option to offer information-theoretically secure authentication too? It will be crazy on pad use, and yes,...