[8614] in cryptography@c2.net mail archive
Re: stego fingerprints
daemon@ATHENA.MIT.EDU (Niels Provos)
Tue Feb 20 11:51:29 2001
From: Niels Provos <provos@citi.umich.edu>
In-Reply-To: David Honig, Sat, 17 Feb 2001 14:50:27 PST
To: David Honig <honig@sprynet.com>
Cc: William Knowles <wk@c4i.org>, cryptography@c2.net
Date: Sun, 18 Feb 2001 13:14:41 -0500
Message-Id: <20010218181442.1072F207C1@citi.umich.edu>
In message <3.0.6.32.20010217145027.008aee20@pop.sprynet.com>, David Honig writ
es:
>1. Measure at the stats on the least significant bits from your cover
>source.
>2. Shape the uniform distribution you get after encryption into
>the form you observe from your coverbits.
>3. Replace.
This approach is flawed. The distribution of the least significant
bits depends on words from which the LSBs originate. If you consider
only the statistics of the least significant bits, you will distort
statistics based on the whole data set.
You can find a paper that I wrote about the topic at
http://www.citi.umich.edu/u/provos/cv.html#papers
OutGuess, http://www.outguess.org/, is an implementation that will
preserve such statistics. It also ensures that the results from, e.g.
Maurer's Universal test do not change significantly.
Greetings,
Niels.