THC-Yaotp 0.1 review

THC-Yaotp (Yet Another One-Time Pad) is a tool that implements so called one-time pads and that is useful only to the totally paranoi

License: GPL (GNU General Public License) File size: 68K Developer: The Hackers Choice

0

THC-Yaotp (Yet Another One-Time Pad) is a tool that implements so called one-time pads and that is useful only to the totally paranoid geek.

Here are some key features of "THC Yaotp":
Real random number generation by audio sampling and hashing. Generated data passes the DIEHARD RNG test suite.
Automatic sanity check of random data using statistic values (mean, deviation, entropy) to avoid sampling EMI noise or silence.
Key management that enforces one-time usage and irreproducible key destruction similar to secure-delete
Obligatory message compression, checksumming, uuencoding and PGP-like ASCII output
No whistles and bells, but a tool for the true security fanatic. (Maybe even NSA-resistent)

Example message:

BEGIN YAOTP MSG {qvT6ibeE8gQuH3iSN4knl3fDN9TlfkEkd6+74/zWoksuk27oSZIAx2d0gZeT fXZBm+BezyjYqPX+VPPiACkiyGB12E4nHW7MYm9eOlagnnPLUae/uAAAAACb} END YAOTP MSG

And the corresponding test.key

Key file: test.key
Total key size: 8192
Available key size: 8192
Creation time: Thu Aug 5 16:14:55 2004
Key label: Test Key

You can decrypt the above message by downloading this page and the key and executing Yaotp with the following options:

$ wget www.thc.org/thc-yaotp/test.key
$ wget www.thc.org/thc-yaotp/index.html
$ cat index.html | yaotp -k test.key -d -v