Hello!

You've landed in the archive of the Cambrian House community. We've kept some pages here for posterity but the community is no longer active. Now we market the technology that made our early crowdsourcing a success.

Can we help you get to Cambrian House the company? – Come on over.

Are you seeking crowdsourcing technology? – Check out Chaordix by Cambrian House.

Thanks for dropping by
The Cambrian House Crew

Close [x]
Cambrian House

Quality means doing it right when no one is looking.
Henry Ford

Cambrian House began as a crowdsourcing community using a wisdom of crowds based approach to discover new business and technology ideas. These pages are being kept online as a technology demo to showcase Chaordix™.

Looking to harness the power of your crowd? Find out about Chaordix™ - technology that enables enterprises to get the most out of crowdsourcing.

Message The Future

Bjoern
Bjoern is offlineSend a Message to BjoernAdd Bjoern as a FriendSend a Hat Tip to Bjoern
  • Submitted by: Bjoern
  • Created: Sep 24, 2007, 5:49 am
  • Share on Facebook
  • Promote
 

Join Cambrian House

People

Ideas

Businesses

Connect with talented people. Collaborate on ideas. Realize your vision.
Not freeish. Not freesque. It's free!

The Idea

Sometimes you want to send a message that should only be readable in the future, for example if you want to send somebody a message they should only be able to read on their birthday. Another scenario would be that you are in possession of top secret information and are worried that some agency or other will try to murder you before you can leak it out. Send it to a newsgroup in encrypted form, so that it is clear that murdering you will not prevent the information to spill.

Another scenario could be publishing information about yourself you only want the world to know after your death.

My idea is to provide a list of public encryption keys for each day in the upcoming x years. Then every day publish the private key for the respective day.

That way, people could publish their messages encrypted with the public key for some day in the future. When the day arrives, people will be able to read the message, but not sooner.

Problems: I don't see how I could provide a really secure environment for the keys. If I just put them on a normal server, it would certainly be hacked if there was some really important information encrypted with it. Worse, the killers might come for me, hoping to extort the keys from me instead of the original publisher of the information.

I also don't see a way to make money, it would just be a fun project...

I thought of this idea when I was...

contemplating to dicover something really important, like an algorithm that could crack any existing encryption schemes.


Comments Posted

Goosie
Goosie Posted: September 24, 2007, 11:40 am

I like the idea, altough I think (Im not sure) there are already some options after your death, maybe search on funeral.

When you realy are able to secure the stuff, why can't you ask some money? Will be a nice site and indeed very attractive for hackers. A lot of people will be curious what others have saved on the site. Maybe actually that's the trigger to get the whole world on the site :-)

About security, not my cup of tea, but hopefull someone here can help.

Perry

vanhees
vanhees Posted: September 25, 2007, 12:38 am

Perry is right about hte security part although you can keep information off-line and only put it on-line after the date that you choose.
The problem is when someone kills me, how do I notify you that I'm dead?
Tommy

Bjoern
Bjoern Posted: September 25, 2007, 3:15 am

No notification necessary, you just say "publish this in 100 years" or something (small risk to still be alive by then - too bad). OK, the other scenario would also be interesting, publish at time of dead. Might be an interesting extension of the business. Although I suppose traditionally this was done through lawyers, at least that is what I have seen in movies several times.

I am now also thinking, maybe I could only store the keys for the coming year on the server, and the others in the vault of a bank. That should be fairly secure at least for the messages that reach into the future further than one year. I would still need to make sure that the service keeps running even if I could not attend to it personally (ie in case I die). An interesting challenge to set up an organization that can guarantee to still be in service 50 years from now.

micco
micco Posted: September 25, 2007, 7:10 am

From a technology side, the cryptography is easy. Like you said, a daily public key pair would accomplish it. But you're also right that keeping those key pairs secret until the appropriate time is a very hard problem. You have two very big problems in that regard: internal and external threats.

For internal threats, you have to convince me that you are trustworthy. Nevermind whatever security you put in place to keep the keys secret from the public; I have to trust you with my info. If you have the keys already generated (which is required if you're going to publish the part of the key for me to encrypt with) then I'm basically telling you my secret and asking you pretty-please not to tell. Why would I do that? Convincing me is an enormous marketing challenge and one slip blows the whole deal.

For external threats, I'd worry less about bad guys with rubber hoses and more about law enforcement officers with warrants. There's no way your key store would stand up to a legal challenge of privilege, so the first time any authority is interested in any of your users, they'll get a warrant for the key(s). At that point (IMO) the entire system is compromised because then not only do I have to trust you, but I have to trust every member of every LEO that's seen your keys. While I trust LEOs in general, it would be naive to assume that every individual officer is absolutely trustworthy not to misuse data obtained by warrant.

However, this is a very interesting problem. I wouldn't be surprised if some big-brain cryptographer had come up with some elegant solution to do exactly what you propose in a secure way. It might be worth posting the question on a crypto forum or mailing list because this is just the kind of thing they like to conjecture about.

One inelegant solution would be to make your keys of different sizes and then destroy the private key of each pair. You could then set some big iron to the task of breaking each key. You could say that a key of x-bits is probably secure for a year, a key of y-bits is probably secure for five years, etc. (barring any breakthrough in factoring or calculation). This makes it more of a novelty than a day-by-day service provider, but at least you could have some amount of security that no one could get your keys without devoting extraordinary cracking effort.

Bjoern
Bjoern Posted: September 26, 2007, 1:48 am

I like the idea to destroy the private key and leave it all to computation time ;-) But there is another problem anyway: the biggest supercomputer of the world is currently owned by hackers. It is called Storm, a network of hacked personal PCs. Therefore I wonder how secure any encrypted information is anyway? Perhaps Storm could crack anything they want in relatively short time. Maybe not, though - I'd have to do the calculations.

In any case I think it would be impossible to provide a key that would hold up for 100 years. Maybe 30 years into the future would be doable - again, I would have to do some research about the current state of the art.

micco
micco Posted: September 26, 2007, 6:48 am

I don't think Storm or any other botnet is a big concern. Yes, they dwarf most of the other grid computing solutions, but they have a vested interest in staying under the radar. As soon as they start to peg those machines with hard computations, more people will realize they're compromised and take basic security measures. The spam and DoS trades are far to profitable to risk a botnet for something like cracking encryption keys unless there is a guaranteed payoff.

saigon
saigon Posted: September 26, 2007, 1:18 pm

yeah a fun project ..and CH community mostly dislike a "nonprofitable" concept...

Goodluck anyway!

fish99
fish99 Posted: September 26, 2007, 4:27 pm

If it is technically possible, I like this idea. Perhaps people will add thoughts that they would like releases in a month a year or 100 years.

Kind of a legacy.

joyce
joyce Posted: September 27, 2007, 2:44 am

I think this is being done already...i read it somewhere and also some e-cards services have advance delivery date that do the trick.

micco
micco Posted: September 28, 2007, 6:43 am

joyce, I've seen several services that offer advanced delivery dates, but not in any secure way like is being described here. Sending an ecard with a delivery date in the future is almost trivial. Keeping the content secure before that date is another problem entirely as discussed above.

If you've seen services that offer what this idea describes, I'd be very interested in seeing how they're solving those problems.

GordonMcDowell
GordonMcDowell Posted: October 3, 2007, 1:57 pm

Maybe the key can be distributed on a P2P network? Or a key to the key? Somehow distribution might alleviate warrant fears (parts can reside outside of any one jurisdiction). I know that's not a solution but maybe its part of a solution.

Brenden
Brenden Posted: October 4, 2007, 11:09 pm

there is something like this: http://www.futureme.org/

LarsBell
LarsBell Posted: October 19, 2007, 1:49 pm

Imagine if all of the private keys had been put on a spacecraft like Voyager. Then each day it would transmit that days private key back to earth. Because it is going very fast away from earth and has a huge head start it would be next to impossible to catch it. Even if someone in a hundred years designed a spaceship that could go so much faster that it could catch it, it would be very very hard to launch such a chase ship without everyone knowing.

 

Post A Comment

Got something to say?
Log in to post a comment.