Tag Archives: encryption

Protected by Lava Lamps

Decrypting the Enigma message keys were crucial for the Allied efforts in World War I, but how is encryption used today? Technology has advanced considerably from the rotor cipher machines of the 1910’s.

Today, encryption and cryptography relies on randomness. A computer or a code cannot generate truly random numbers, and if an encryption key is not random it can be duplicated. Any physical or experimental measurement will always have inherent uncertainties due to the process or the inaccuracy of the measurement – this is truly random.

However, creating truly random numbers is time consuming and expensive, so pseudorandomness is used instead. Pseudorandom is defined by Merriam-Webster as “[numbers] selected by a definite computational process but that satisfy one or more standard tests for statistical randomness”.

Cloudflare, a company based out of San Francisco, uses a wall composed of 100 lava lamps, to protect its users’ data. Uber, OKCupid, and Fitbit are among the 6 million websites protected by Cloudflare.

Lava Lamps. Mike Mozart Flickr

 A camera takes pictures of the blobs and lights created by the wall of lamps and converts it into a stream of random data. Because the flow of the “lava” is unpredictable (ie. random) it is an ideal source to generate pseudorandom numbers.

However, it’s not just the lamps that are recorded, but the ambient noise of the camera as well, adding another level of randomness.

This is then used to create unpredictable encryption keys by using a deterministic algorithm which inputs a random value (called a seed) and outputs more random values. This algorithm is called a cryptographically secure pseudorandom number generator. These are pseudorandom numbers.

Cloudflare handles 10% of the total internet traffic, so the camera takes pictures of the “Wall of Entropy” every millisecond, all day, every day.

The company also has offices in London and Singapore that each use another unique tactic to generate randomness. The London office uses a chaotic pendulum (see video below) and records its movements and the Singapore office uses a radioactive source.

YouTube Preview Image

In a world where our lives are documented online, providers like Cloudflare are key to keeping us and our data safe.

Lead-based Invisible Ink: Revolutionizing Data Encryption

James Bond, get ready to put your skills to the test.

The images depict printed patterns created by the lead-based invisible ink, shown under UV light. From left to right: Butterfly with intricate details, QR codes, text in English. Photo Credits: Congyang Zhang et al., 2017.

Scientists from People’s Republic of China created an invisible ink that easily switches on and off. These findings, published in the journal Nature as a research article titled Conversion of invisible metal-organic frameworks to luminescent perovskite nanocrystals for confidential information encryption and decryption, provide a glimpse into the future of high-security information encryption. Unfortunately, there’s one huge drawback: lead, the invisible ink’s main component, can be poisonous in large quantities.

Invisible ink uncovers counterfeit money and stores private information by keeping written content hidden from the naked eye. Ideally, invisible ink remains undetected until treated with UV light, however, previous invisible inks left residues resembling wet paper. The new lead-based invisible ink material leaves no residue, hiding secret information unsuspiciously.

Lead-based invisible ink is composed of a yellow powdered salt which turns clear in solution. The salt, composed of extremely tiny crystals known as nanocrystals, glow under UV light.

The powdered salt, shown in normal light (left) and UV light (right) This salt MABr is the foundation for the on/off switching properties of lead-based invisible ink. Photo Credits: Congyang Zhang et al., 2017.

The lead-based ink becomes invisible with the addition of methanol, a common antifreeze. UV light cannot detect the ink after the methanol treatment, making the invisible ink undetectable. The hidden lead-based ink, easily passed around without fear of UV detection, will safely enclose the confidential information. Reapplication of the custom-made salt triggers the ink’s UV-detectable properties, making the information visible again. This manual on/off switch adds an extra layer of protection against UV lights.

Reversibly switching of invisible ink: The researchers’ university logo is encrypted by methanol (MeOH) and then decrypted by adding salt (MABr). All three images are shown under UV light. Photo Credits: Congyang Zhang et al., 2017

The scientists found the ink did not fade over a testing period of three months; the ink lasted over 20 on/off switches. This means the lead-based ink can be useful for long-term important documents. Realistically, the toxic lead component must be replaced by safer alternatives before the ink can be used globally.

Although scientists plan to use the lead-based invisible ink mainly for increasing security of anti-counterfeit measures, the ink’s virtually undetectable qualities must be approached with skepticism. In the wrong hands, such as the hands of corrupt spies and drug lords, this lead-based invisible ink can destroy our society.

Will the potentially life-changing applications of this on-and-off invisible ink outweigh the risky consequences?

Only time will tell.

– Jessica Shi