Click to add text
Click to add text
Click to add text
Click to add text
Opinionated Encryption Standard
Key derivation, reimagined as a conversation
Confidential — though not, we want to stress, in any technical sense
Source: nobody, because we did not ask anybody.
Put a question to a language model.
Whatever it says becomes the passphrase.
Industry standard, unimpeachable, and not ours.
Steps 1 and 2 are the innovation. Step 3 is the encryption.
Share of seal-then-open round trips that returned the original text.
Measured by GRAPH.EXE, 40 round trips per level. The only slide on which the numbers are real.
With no passphrase, OES provides no security. Not weak — none. The question that derives the key travels inside the blob as an eight-byte salted reference into a bank of 150 questions, and the bank ships with the program. Anyone holding the file resolves it in about 150 hashes, asks the same question for free, and reads the text.
The keyspace is things a model tends to say: a few hundred candidates. The GCM tag confirms a correct guess instantly, so every measurement feature in the product doubles as a brute-force verifier. The ciphertext is shaped like leaked credentials and will trip secret scanners that do not know it is a joke.
It also destroys data. A changed opinion is a lost key, permanently, and swapping the model discards everything sealed against the old weights. A secret question and a passphrase fix the first problem and not the second, and make OES exactly as strong as the passphrase and no stronger.
Nothing on this slide is a joke. It is set small for the usual reason.
Encrypt something that does not matter. Celebrate.
Discover that providers update models without consulting us.
Rename permanent data loss to automatic key rotation.
Raise a Series B on the strength of the rename.
Dates are indicative and, like the keys, subject to revision without notice.
Thank you
The model has several. It will have a different set tomorrow, and that is the product.
With no passphrase, this program provides no security.
Some warning was displayed here. Not anymore :)
It also loses data, often, and calls that a feature.