1993-10-26 - Re: signed mail + steganography = ?

Header Data

From: nate@VIS.ColoState.EDU (CVL staff member Nate Sammons)
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Message Hash: d9234550ab3393158804b1fa315a17a801293b1991ce489d99d01587cdc763be
Message ID: <9310260105.AA21690@vangogh.VIS.ColoState.EDU>
Reply To: <9310252123.AA19707@bass.chp.atmel.com>
UTC Datetime: 1993-10-26 01:10:09 UTC
Raw Date: Mon, 25 Oct 93 18:10:09 PDT

Raw message

From: nate@VIS.ColoState.EDU (CVL staff member Nate Sammons)
Date: Mon, 25 Oct 93 18:10:09 PDT
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Subject: Re: signed mail + steganography = ?
In-Reply-To: <9310252123.AA19707@bass.chp.atmel.com>
Message-ID: <9310260105.AA21690@vangogh.VIS.ColoState.EDU>
MIME-Version: 1.0
Content-Type: text


writes Peter Baumbach:
>What if you couldn't tell when a letter was signed unless you new the  
>public key of the person signing it?  How could this be done?  Encode 
>the digital signature with steganography.  Is this possible when  
>steganography alters the very message you wish to sign?  I don't know. 
>The benefit of this is signed and unsigned messages look like each other. 
>People can't be lazy anymore and just assume the signature is yours.  
>Your boss isn't likely going to notice you used pgp to sign your mail. 
>Peter Baumbach

What if you were to use a higher number of bits per character than 
ascii?  Then you could use the highest (or lowest) bit for a signature.

This may not be such a good idea for ascii mail, but if there is ever
a real "multi-media" (I _hate_ that term) mail, such as 'ol NeXTmail,
then I can see how it would be easy to squeeze in a signature.

- -nate

- -- 
| Nate Sammons   email: nate@VIS.ColoState.Edu
|   Colorado State University Computer Visualization Laboratory
|   Finger nate@monet.VIS.ColoState.Edu for my PGP key
|   Key fingerprint =  2D CD 07 CA 7B EC A8 4A  86 7F F3 A8 1D 15 65 46
|   Title 18 USC 2511 and 18 USC 2703 Protected --> Monitoring Forbidden
+--------+ Guerrilla Cryptographer             Always remember "Brazil"