Comment on Is it possible to design a (pen and paper) cipher that is secure against government cryptanalysis for at least 10 years?

• yoevli@lemmy.world ⁨1⁩ ⁨month⁩ ago

  That’s assuming the key and message are entirely independent. If you or the recipient isthe type of person or doing the types of things that would attract surveillance from a nation state (because realistically that’s the one of the only scenarios where non-esoteric privacy practices might not cut it), it’s not unrealistic that they’d intercept both your digital and physical mail and would be able to correlate them.

  source

  • otacon239@lemmy.world ⁨1⁩ ⁨month⁩ ago

    And that’s why if you’re in that position, you should have already shared your public key with them long in advance and your private key stays encrypted on an air-gapped laptop running Tails + CoreBoot. The message stays encrypted and you’re the only physical device and knowledge to decipher it.

    But that all comes down to security vs convenience. I’m super glad passkeys are starting to become available in a lot more places. They’re super convenient and if you use a password manager responsibly with a hardware key, they’re just as secure as the locks on your house.

    Which is to say, not very, because ultimately nothing beats a $5 wrench.

    source