Rubber-hose cryptanalysis
From Wikipedia, the free encyclopedia
In cryptography, rubber-hose cryptanalysis is a euphemism for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by coercion,[1] in contrast to a mathematical or technical cryptanalytic attack. The term refers to beating someone with a rubber hose until they cooperate.
The term originated in the sci.crypt newsgroup in a message posted 16 October 1990 by Marcus J. Ranum, alluding to bastinado:
- ...the rubber-hose technique of cryptanalysis. (in which a rubber hose is applied forcefully and frequently to the soles of the feet until the key to the cryptosystem is discovered, a process that can take a surprisingly short time and is quite computationally inexpensive).[2]
In practice, psychological coercion can prove as effective as physical torture. Non-violent but highly intimidating methods include such tactics as the threat of harsh legal penalties. The incentive to cooperate may be some form of plea bargain, such as an offer to drop or reduce criminal charges against a suspect in return for full co-operation with investigators. Alternatively, threats may be made to inflict extreme violence on close relatives (e.g. wife, children or parents) of the person being questioned unless they co-operate.
Although the term is used tongue-in-cheek, its implications are serious: in modern cryptosystems, the weakest link is often the human user. A direct attack on a cipher algorithm, or the cryptographic protocols used, will likely be much more expensive and difficult than targeting the users of the system.[citation needed] Thus, many cryptosystems and security systems are designed with special emphasis on keeping human vulnerability to a minimum. For example, in public-key cryptography, the defender may hold the key to encrypt the message, but he may not hold the decryption key to decipher it. The problem here is that the defender may be unable to convince the attacker to stop coercion. In deniable encryption, a second key is created which unlocks a second convincing but relatively harmless message (for example, apparently personal writings expressing "deviant" thoughts or desires of some type that are lawful but taboo), so the defender can prove to have handed over the keys whilst the attacker remains unaware of the primary hidden message. By using these techniques, threats to operators or other personnel will be ineffective in breaking the system.[citation needed] The expectation[by whom?] is that rational adversaries will realize this, and forgo threats or actual torture.
In some jurisdictions, statutes assume the opposite — that human operators know (or have access to) such things as session keys, an assumption which parallels that made by rubber-hose practitioners. An example is the United Kingdom's RIP Act, which has made it a crime to not surrender encryption keys on proper demand from a government official as authorized in the statute. That users of some cryptosystems may not be able to do so, as noted above, is not addressed by the statute.
[edit] See also
- Deniable encryption
- Social engineering (computer security)
- Black-bag cryptanalysis
- United States v. Boucher, a case before the courts on whether a criminal defendant in the U.S. can be forced to reveal his encryption passphrase.
