Security without a lock to pick.

Math-Based Security Favors the Smarter Mathematician. Randomness Based Security favors the transmitter who uses sufficient randomness, whether this transmitter is smart or dumb

Think about this for a moment to realize what a fundamental cyber revolution is about to happen!

Your security is violated when hackers figure out your security pattern. By injecting a measure of randomness you change this stationary pattern, and thereby you keep your hackers confused and unsuccessful. BitMint adds randomness protection to any pattern-bound security protocol. We are unique, we are effective, we are worth your consideration. BitMint offers alternative cryptography based not on pattern-overload, rather on pattern-devoid ciphers. They can be mixed with at will randomness, projecting at-will security. BitMint masters randomness engineering and offers a unique contribution of cyber security

Read the White Paper

If you want a guarantee of cipher security then Security.Bitmint.com is your only source. Our merchandise comes with mathematical proof of efficacy

Cyber Security is Vulnerable to Adversarial Mathematical Innovation. Do You Ignore this Vulnerability? Choose the BitMint Alternative!

Just Published (Peer Reviewed): Polar Lattice Cryptography

The President is right, Signal App is insecure. Same for any cryptography with a lock. A lock can be picked if you are smart enough. To be secure, use Pattern Devoid Cryptography where the secret is indistinguishable from the noise! Pattern is a lock. No pattern no lock, no lock to be picked. Randomness is where no pattern survives, and there your secret is safe!

World dominance is determined in cyber space. Everything we do today in cyber space is vulnerable to the Single Smart Mathematician Threat. A thousand not-so-smart mathematicians are no match to a single smarter mathematician. The power grid, banking, transportation, healthcare, communication, the military are all vulnerable. The Clock is Ticking, one smart mathematician on the other side is all that is needed for us to suffer the equivalent of a thousand nuclear bombs. There is only one way to protect our civilization: pattern-devoid cryptography

BitMint * Tel-Aviv * Washington

Cyberspace has crowded us all into one neighborhood -- we can cyber touch each other -- all seven billions of us, but, alas, it also puts us all touch-distance from those marginal malignant exploiters and misusers, who would readily undo all the wonder of cyberspace, without us putting up a formidable wall of security to fend them of.

BitMint, the Cyberspace Corner Store, puts forth its share of this wall. We introduce fresh thinking of security:

You build security by stepping back from overconfidence, by realizing that even if you are smarter than your attacker, you cannot win often enough, and therefore you need to rely on the one source that smarts cannot defeat: randomness.

At BitMint we developed a security suite based on high quality randomness. We exploit (i) the recent development of commercially available high-grade randomness, combined with (ii) our new randomness-upgrading tool. We also exploit the reality of (iii) Moore's law: randomness is cheaper to hold, and cheaper to communicate, much cheaper than ever before,

We build randomness-rich ciphers which shift the security responsibility from the cipher designer, to the cipher user. The user is the one who prizes his data and its security, it is he or she, who needs to be able to determine how much security to project. Security is expensive, it should be dolled out in good measure, decided by the user, not by a generic designer. Our product line is built accordingly. The user of BitMap, BitFlip, BitMix, etc. can dial up the security of his process up to 'ultimate' heights (mathematical security), for a price, and project a lower security for a lower price. Our user decides, not us.

As it turns out BitMint security products can deliver where others fail. We offer battery-friendly IoT ciphers, we offer zero information-leakage communication mode, as well as powerful management products -- a document management solution that keeps everyone reading only what is intended for them to read, while maintaining the project on one single shared document.

BitMint solutions extend to data fingerprinting (Date Sourcing Technology) which makes large data breaches of public information database non profitable, and hence not worth the effort, and thereby stopped.

With the power of randomness we put forth the notion of terminal equivocation, the mathematically based triumph over the privacy violator.

All cryptographic tools are fueled up by randomness, mostly low-grade (algorithmic) randomness, which was the order of the day for decades. High-quality randomness was not readily available. Very recently the crypto-eco system changed. Cryptography became an international 'game' of national survival. Our entire civil order hinges on the integrity of the cryptographic foundation of our communication and digital banking. This foundation is strategically threatened by (i) advanced math, and by (ii) the emergence of quantum computing. Quantum computers are poised to destroy the full range of cryptographic primitives that underlie life in cyberspace. The old guard is responding by devising ever more complex algorithms. It's a strategic drive with unclear prospects. What else is there? There is! A second strategic match for the double threat of "math-attack" and quantum computing is high-quality randomness, richly applied. And the time is right. High-grade randomness is now readily available; Moore's law over the cost of storing and communicating randomness has been in effect -- these cost figures are very appealing and getting more so. What is needed is the simple realization that modern cryptography is due for a new strategic option. The security projected by ever more complex algorithms may not be enough. It would be irresponsible not to deploy the rich-randomness strategic security boost.

When we get down to it, we find many pleasant surprises. Randomness-Rich ciphers turn out to have features and offer capabilities that are totally missing from the old guard.

The BitMint randomness-rich cipher suite of products includes:

BitFlip: Parallel Cryptography

A super polyalphabet cipher that encrypts several messages in parallel with steganographic properties.

BitMap: Geometric Cryptography

A cipher based on the fact that a journey on a map can be described either by its stepping stones, or by the pathways between these stones, the translation from one to the other requires possession of the map.

BitMix: Ultimate Transposition Cipher

Unleashing the power of raw transposition where n items may be ordered in n! ways.

BitMeet: Spontaneous Privacy

An non-algorithmic alternative to Diffie-Hellman and RSA, allowing two online strangers to establish a private communication channel.

Algorithmic Complexity Disintegrates before our Eyes, Randomness-Rich Ciphers come not a moment too soon!

Check!

Quantum Algorithms for Optimization and Polynomial Systems Solving over Finite Fields.Quote: "we give quantum algorithms for two fundamental computation problems: solving polynomial systems and optimization over finite fields. The quantum algorithms can solve these problems with any given probability and have complexities polynomial in the size of the input and the condition number of certain polynomial system related to the problem"

Quantum Algorithms for Boolean Equation Solving and Quantum Algebraic Attack on Cryptosystems quote: "We apply the quantum algorithm to the cryptanalysis of the stream cipher Trivum, the block cipher AES, the hash function SHA-3/Keccak, and the multivariate public key cryptosystems"..

BitMint Technology

BitMint is a technology hub pioneering novel thematic innovation through the methodology of Artificial Intelligence Assisted Innovation (AIAI). Combining material sciences and computer sciences, with financial insight, and recognizing quantum randomness as the cyber oil that powers cyberspace, BitMint is marching on with 11 awarded patents and about three dozen more in the pipeline. We focus our new technology on exploitation of quantum randomness.

BitMint awarded patents:

6,823,068 * 8,229,859 * 9,471,906 * 10,395,053 * 10,445,730 * 10,467,522 * 10,523,542 * 10,541,808 * 10,541,954 * 10,594,480 * 10,608,814 * 10,673,822

BitMint products and technology (software and hardware) are driven by the recent realization that the rise of commercially available quantum grade randomness is a game changer. Skillful deployment of randomness throughout cyberspace is the call of the hour, and we are up to it.

Here we focus on the effective use of quantum-grade randomness as the critical ingredient for a suite of security tools which put the user in the driver's seat, to allow them to deploy sufficient randomness to defend against any and all cyber attacks.

Help yourself to recent books written by the BitMint team:

BitMint Technology Site

BitMint builds cyber security and cyber privacy products; alternatively BitMint is licensing its intellectual property (IP), and we also offer privacy and security consultation.

How is BitMint different from other Security Vendors?

BitMint offers a completely new approach to cyber security. Mathematical complexity is out, quantum randomness is in. 103 years ago, Gilbert S. Vernam, of Bell Labs in New Jersey filed a patent, and a quarter of a century later Claude Shannon proved this cipher to be mathematically secure. It was an academic statement then, because Vernam required large quantities of high-quality randomness which was not conveniently available at the time. So cryptographers abandoned the high mark of mathematical security and acquiesced to 'computational security' which has no mathematical proof of efficacy. So much momentum was built behind this 'computational security' for decades now, that no one seems to notice that high-quality randomness has become commercially available, and hence the Vernam philosophy may be recalled from the back drawers of history. BitMint did notice. We developed a suite of "Trans Vernam" ciphers which we now offer to anyone who needs proven mathematical security for their data and for their communication.

Along the way we discovered new aspects and new applications, which enrich our offering. We rely on curious residents of cyber space to check us out. We can provide you with an effective product, or with guidance to build your own, or, if you wish, provide general consultation. Drop us a note.

BitMint Security Seminar

Private Training with no Strings Attached

BitMint is different, and therefore regardless of how well your cyber security is cared for, you do want to listen to us.

You do realize that the more comfortable you get with your streamlined security, the more vulnerable you become. Your operational inertia is what smart hackers are biting into. Unaltered protocols surrender to their patient attackers. Hackers surprise you. Your only chance to prevail is to stay alert.

Alertness is the most profound security principle, trumps wisdom!

If you are not checking what BitMint Security has to say, you are not alert, at least not to the degree required by your security responsibility.

We are different, and therefore we are of great interest to you. We work with high-end customers around the world, we have high-end intellectual property (over 30 newly issued security patents), and everything we do is based on something no other security vendor is doing: we regard the attacker as a smarter-than-us innovator.

We don't defend against yesterday's attack. We defend against attacks we are not smart enough to imagine -- but our attacker is. All that we do is to make it a bit harder for the attacker to compromise our digital assets. It's humility and resoluteness combined. It is a security philosophy we learned in our early years serving the State of Israel. We perfected it over the years, through field practice, through a PhD dissertation. We were driven by our fidelity to the underlying philosophy that reminds us that we tend to be over-impressed by the things we know, and remain under-impressed with the vastness of the unknown.

Sign up for your private seminar: gideon@BitMint.com

Shapeless: A Language where the letters have no shape, no specific form, no geometry. They cannot be hacked, and cannot be erased; used everywhere fraud is rampant and mistakes common. Entropy speaks.

Applications: mark warnings, mark use, mark ownership: used for anchored cyber security, products markings (e.g. medical pills), preventing combat friendly fire and more.

BitMint * Tel-Aviv * Washington

Email: info@BitMint.com

Trans Vernam Ciphers (TVC)

The Era of Breakable Cryptography is Coming to its End

NEPSAR

RSA, Elliptic Curves, Lattice -- are cracking up under the looming quantum threat. Quantum Entanglement technology moves in to keep cyberspace alive. Alas, it is not there yet. It is complicated, limited, and expensive -- creating an innovation vacuum filled in by NEPSAR -- a Non-Entanglement Physical Shared Ad-Hoc Randomness solution that serves any size community of shared secret keys by generating fresh shared randomness at will.

Security.BitMint.com

If you are not ready for surprises you are not cyber-secure!

You run your IT center, all is in order, and suddenly you learn that the NIST-certified PQC algorithm you so faithfully installed throughout your system, has a subtle flaw; or suddenly your communication data includes long-lasting secrets which your adversary will harvest now and crack later when his quantum computers are more powerful. What do you do when this happens?

Today you have two options (i) to keep on going, and pray that you have not been compromised, or (ii) hold off any further communication. Neither option is a happy one.

That is where the TESTOR gear comes into play

TESTOR is like a 'gas pedal' for security. When the threat rises you right away push the pedal to wrap your communication with added security. Not instead of anything you normally do for security, not replacing any cipher (quite a complex operation), no need to coordinate anything with the recipient of your data, Just dial up, if you will, and upgrade the security of your outgoing messages to meet or exceed the surprise threat.

TESTOR in a new powerful operational concept. It is based on non-trivial ciphertexts. They are longer but they erect a cryptanalytic barrier that keeps your adversary at bay. This is done by shifting the secret-cracking attention of the attacker away from your secrets, diffusing them to such a low level that your secrets are safe. TESTOR is instantly ready, no delay, no waiting time, no need to coordinate, no need to get special aithorization, the shift supervisor can kick it in. It is a dial-up security. You can apply it mildly, moderately, or full steam. How much security can you possibly get? How does Vernam level sounds to you?

Since you are such a trusted cyber security professional, it is obvious that you are surprise-ready and curiosity driven (the essence of cyber security). Don't let the tyranny of the urgent subdue your curiosity, check out this surprising new cyber weapon: TESTOR -- dial-up at-will security!

Weak Keys: Why Cyber Security is Failing

All the Prevailing Ciphers Are Vulnerable to Hidden Weak Keys Unwittingly Used

None of the prevailing ciphers claims a proof of efficacy.

They claim mathematical complexity that works for the average cryptographic key selected for the used cipher. Alas, certain keys in the key space are vulnerable. Meaning they can be extracted from the exposed ciphertext.

No one would knowingly use such a 'weak key' however key weakness is hard to detect. Some weak keys lie very deep in the key space. If our adversary spotted them and we didn't, then, unwittingly, we will use them in proportion to their count in the key space (because we select our keys randomly). And so a known fraction of our secret communication, be it national secrets, private secrets, crypto money etc will be compromised.

To remedy this universal flaw, we need to think afresh, we need to approach cryptography differently. BitMintalk.com

Learn More

BitMint * Tel-Aviv * Washington

Email: info@BitMint.com

The NIST Recommended Cipher you have been using may be compromised! Right then LifeBoat Ciphers kick-in. They rely on huge amount of Randomness, and are proven secure!

Think-out-of-the-Box Cryptography

What a simple idea: you mix the ciphertext with many decoy ciphertexts so that together the cipher stream decrypts to many plaintexts, and it is impossible for the attacker to distinguish between the true plaintext message and the many decoys. NIST ciphers are more elegant, to be sure, but they all yield to a mathematician smarter than expected. The Lifeboats don't.

Lifeboats-on-the-Titanic cryptography runs on randomness, not on complexity. Complexity can be negotiated by smarts, randomness cannot. Randomness is messy but it does what it is supposed to, and with mathematical proof.

So stay with NIST, it is cleaner, but keep the "Lifeboat" hanging there in case you need it. As a CISO, your great fear is mental inertia, your greatest asset is alertness and curiosity. The threat before you is innovative -- you should be too. Invest 30 minutes in learning how to protect yourself from a surprise NIST failure. Gideon@BitMint.com

Lifeboats on the Titanic Primer

BitMint * Tel-Aviv * Washington

Email: info@BitMint.com

Stop Gap Quantum Security

The US National Institute of Standards and the Technology, NIST, is racing to develop a new generation of ciphers to withstand the coming attack from quantum computers. Alas, NIST is not ready yet, while the quantum adversary may surprise us with "our pants down". It is therefore that BitMint Stop-Gap Quantum Security is the go to solution for any critical organization for which quantum risk is substantial.

Contact US

QAI security

Quantum AI Cryptanalysis the new strategic threat

No one saw this coming. While cyber security is obsessing over the quantum threat, (and for good reason) a completely different strategic threat is fast looming. Cyber is being challenged by a completely new attack vector. Nothing like it ever faced us, and we better be ready.

In retrospect we should have anticipated what is happening. AI, artificial intelligence, has shaken up every data dependent field of human endeavor. AI entities drive cars, fly planes, pass the bar exam, and diagnose ailments, AI surgeries are not far behind. Cryptography is no exception.

Cryptanalytic AI homes in on the environment of the message transmitter. Gobbling up reams of relevant and partially relevant data, chewing this data with supervised and unsupervised networks, using the ciphertext as a guide, AI can do to security what the great Adi Shamir predicted so many years ago. It would by-pass it.

The challenge is new, and so should the reply be. BitMint is deploying an old martial art technique: using the opponent's strength against it.

Read our Blog

Contact US

Article Presented at CSCE: The 2023 World Congress in Computer Science, Computer Engineering and Applied Computing

July 24-27 2023, Las Vegas, Nevada, USA

AI Oriented Homomorphic Encryption

How to Use Untrusted AI to detect patterns in your secret data

The early use of homomorphic encryption was focused on pre-defined mathematical operations that can be carried out over encrypted data so that upon decryption they yield the same result as if the operation was carried out on the pre-encrypted data. This hides the input data from the party that carries out the computation. Obviously, the application range was quite limited, but the cryptographic body of solutions was intellectually rewarding.

A different kind of homomorphic encryption is now emerging as a need - with a broad range of applications. At issue is the common reality where AI engines are chewing large amounts of data searching for patterns, and identifying inferential pathways. While most of the data feed for AI engines is public data, it is of great need for private organizations to let AI go over secret data to extract useful patterns. If the party that applies the AI is not fully trusted then homomorphic encryption is called for. Alas, here the encryption cannot be limited to a pre specified mathematical operation, it has to be wide open.

That is the challenge that is met by BitMint Homomorphic Encryption tools. We use two approaches:

1. Numerization

2. Similarity Calculus

Numerization transforms the feed data into a fuzzy version where patterns survive, but specificity does not. Similarity calculus replaces the original data with similarity indices, which are more readily digested by the various AI inferential engines.

see white paper

see blog

Non-Digital Data Repository A New Dimension for Cyber Security

Exploiting Nanotechnology for Storing data off the digital grid, outside the reach of hackers and intruders

Packing molecules in a particular configuration is one way to express information without reduction to a string of bits. Using chemical language instead of bitwise storage, keeps the full body of that data accessible only to a reader who has access to this "Rock of Randomness". Upon demand the chemical language is translated to binary strings for computer consumption.

For at least nine long months, a foreign agent was secretly reading top secret US government information. It could happen because stored bitwise data can be stealthily read without leaving a trace, while the custodian of the data is falsely assured by his cyber defense. The data captured in the Rock of Randomness is expressed via the spatial configuration of macromolecules, and measured through a complex conductivity reading via a large variety of measuring ports.

Modern nanotechnology manufactures a set of Rock duplicates, used by communication parties for top secret information exchange. Especially useful for quick recovery from a major breach as sustained by the US government in 2020.

Using the "Rock of Randomness" as a source for cryptographic keys will upgrade the security posture of any modern cyber security setup.

The "Rock of Randomness" may be used to mint very high denomination coins, which cannot be counterfeited because the manufacturing of the Rock is a one-way operation. Given a Rock, it is infeasible to duplicate it. Only the original manufacturing input can build duplicates.

The "Rock of Randomness" built on a large scale is deemed to serve as a 'grounding' for the many coming national digital currencies -- ensuring the integrity of the monetary system.

The "Rock of Randomness" built on a small scale will be fitted into every phone and personal communication device, providing unhackable unilateral randomness for a growing list of applications.

Covered by US Patents (10,467,522, 10,754,326), Peer-Reviewed Published (Cambridge University Press: 04 February 2019 ), further developed at Case Western Reserve University (Macromolecules and Computer Science), Sponsored by Oak-Ridge National Laboratories.

Guarding your remotely-accessible database is your biggest challenge -- and your most alarming vulnerability. Large organizations manage thousands of data access admissions, thousands of data-write and data-rewrite permissions. One 'rotten apple' will bring down a large bank, or a big store chain. You face an alarming chance that one of your thousands of bona fide users has become a phishing victim and their credentials are now being used by a wily hacker contaminating your database, and doing it smartly so that for the longest time you don't even suspect that you have been compromised, and that malware hides in your systems.

The market is full of 'alarm software' that does not point to the problem specifically, just tells you that "something is wrong". Those tools that point to where the problem is, often leave you to find a solution on your own. And so many other protective software packages simply add many layers of interactive security dialogues that your users are reluctant to log in, and when they are in, they stay in idle (and vulnerable) because it is so difficult to get back in later.

That is the cyber security background that opens the door to CyberFit. The underlying idea is simple: users who enter data into the database, do not know how the data looks like when written and stored. Therefore they cannot enter malware hidden as innocent data entry. We use threat-responsive pattern-devoid encryption that stores the data encrypted in a cipherformat that is responsive to the threat associated with the written data. We call it 'Elastic Encryption'. Each data field written into the database is associated with an AI computed threat metric that determines how robust will the protective storage encryption operation be. The greater the threat, the stronger the encryption.

Although no keys are changed, each time the very same data is written into the database, what is actually stored is different. The magic of Pattern-Devoid Encryption (PDE) is assuring that real time randomness keeps the cipher format unpredictable even by the deeply engaged system engineers, so even if one of them is a 'rotten apple' -- they find a resistant system.

All this is kept under the hood. The user is not bothered, neither the writer, nor the reader of the data. The data appears neatly organized, clearly displayed, on screens and printouts, only the 'belly of the beast' houses the defensive format of your most precious organizational asset: your corporate data.

Let's talk: Prof. Gideon Samid, PhD, PE. *. Gideon@BitMint.com

CyberFit.host

BitMint*Entrapment

Silent Entrapment of Identity Thieves: The stolen password they use carries a hidden mark

The best way to fight identity thieves is to deter them with the fear of entrapment.

How?

One attaches a marker to a password. The password looks the same on the screen, but its marker is silently being refreshed as often as you like. When a thief tries to use today the password he stole yesterday then he, unwittingly, announces himself as a thief to be caught, and alerts the system that a theft occurred.

This is a game changer. For a long time thieves faced no deterrence. Failed hackers simply tried again and again. But now, when they get in they must suspect: "Have I been made? Have I triggered a silent alarm, and am I being hunted down while I seemingly compromise my penetrated victim?"

BitMint*Entrapment is not sprung on wild guesswork. It discriminates and zeroes in on hackers who have stolen valid access credentials and use them on the attacked server. These effective thieves are the ones we seek to flush out!

You apply for a loan, the loan officer needs to check your credit, and so, reluctantly, you surrender your social security number. With this piece of information they, or anyone getting access to your SSN, can do you a lot of harm. But not so with BitMint*Entrapment. Private data like social security numbers, account numbers, passwords -- are all Nooanced (TM)- -- marked, and re-marked as often as desired. Now you don't need to change your password so often, because its marking changes -- automatically. How often? On schedule, per request, and even a new password marking every time you use it. You still have to enter your memorized or recorded clear password.

BitMint*Entrapment is effective because for the first time you make your attacker sweat, and worry. As long as there are good targets that don't deploy BitMint*Entrapment, why risk getting caught?

In order to access your account you must type in or paste in your credentials. Your computing device writes these credentials in the Nooance language, where those credentials are marked before they are communicated to the server.

The big catastrophic breaches happen when a remote user enjoying a lot of power over the system unwittingly falls for a phishing trick or otherwise surrenders his credentials to a wily hacker. These high-powered users are prime targets for hackers. But guess what -- they are also the ones most tightly protected with BitMint*Entrapment. Hackers know it, and wonder -- do I get myself into a trap? That is where we want them to be.

The BitMint*Entrapment protocol, the markings of nominal data, (Nooance), and some variety of applications are detailed in US Patents 10395053, 10733374.

AIAI-Cyber Security Artificial Intelligence Assisted Innovation -- Cyber Security Applications

BitMint offers the power of AI to meet your cyber security threats

AI agents are trained to prepare humanly readable case accounts, derived from Web-crawling. This technology has been demonstrated for medical analysis, for journalism and lately also for legal briefs. It may be the fastest growing AI technology. Much as an AI agents can describe a situation, like a fire, or accident with journalistic flare that would not betray its artificial origin, so BitMint develops AI agents that are designed to crawl the Web, review very large amounts of relevant material, including descriptions of successful penetrations, and in summary identify attack scenarios for a cyber system that needs protection.

The security team would then review each attack scenario, to verify that the protection in place could hinder it.

The full power of AIAI comes to play when the AI agent comes up with an attack scenario that was not imagined by the security team. Such a scenario is very likely without any counter measures. But once identified by the AI agent, the security team can put in place a proper defense.

The more surprising the attack scenario, the more it leads to innovative security.

info@BitMint.com

Top PQC Migration with Meta Data Guard

Since you already turn things around (from pre-PQC protocols) why not add the tool that denies hackers the intelligence revealed by your meta data?

It is a tough competition, to win the award to implement the PQC migration for top-notch data vulnerable companies. You need an edge. Here it is: BitMint Meta Data GuardTM, is a pre-transmission module that mixes the content-bearing transmission bits with content-devoid (noise) bits, such that the corresponding module on the recipient end can distinguish between them and discard the noise bits. The attacker, though, will see a fixed data flow and remain in the dark whether the flow is all noise, all content, or some mix. No matter how your data use changes and communication becomes more intensive and more frequent, the attacker always sees a fixed bit flow, guarding your meta data.

The Meta Data GuardTM will be activated only when needed. No negative side effects, no extra burden, easily installed when you anyway migrate from pre-PQC to post-PQC status.

BitMint Meta Data GuardTM is an internationally protected IP, offered as an exclusive competitive edge to top level security companies when they respond to competitive RFPs, or compete for EU or other national and international development funds.

Amnon Samid, CEO * Amnon@BitMint.com

Security.BitMint.com

BitMint * Tel-Aviv * Washington

Email: info@BitMint.com

Hiding-in-Plain-Sight Cryptography

The greatest cryptographer of modern times, Adi Shamir, envisioned that cracking secret messages will become irrelevant, since so much is learned from a secret message without knowing its content: who talked to whom, when, for how long, how often, on which channels -- today AI sleuths learn on us more that they care to know through wealth of meta data that we spill all around us. Encryption gives us an illusion of privacy, luring us to reveal our most intimate secrets under the expectation that the cipher that protect s us is robust enough -- while in fact it matters little.

To achieve privacy in modern day cyberspace, we need to wipe out all meta data from our conversations.

That was the innovation objective declared by our interdisciplinary innovation science group, not too long ago. It was a worthy innovation objective because when launched we were clueless as to what will happen next. A few months later we had a concept and yesterday we filed our first patent.

A visible cyberspace conversation generates meta data at any turn. We first looked for means to quickly wipe out any meta data as it emerges. This did not go very well. So we focused on the adjective "visible" and the conclusion came fast and bright. Invisible conversations do not generate meta data. From there we kicked in our AI Innovation Accelerator, that led us to "Hiding-in-Plain-Sight (HIPS) cryptography".

The guiding idea was that the vast majority of our cyberspace activity has no privacy currency. I really don't mind that a stranger will find out that yesterday at 6PM I asked my brother in law, a reporter for the Washington Post, if his sprained ankle still bothers him. However, when I tell him that my boss destroys financial data before Elon Musk shows up -- privacy is a critical requirement. Most of my conversations with my brother in law, or with anyone else, are of the first category -- no privacy needs. There are very few highly sensitive messages. This imbalance can be exploited.

Our BitMint team has figured out a cryptographic protocol that can hide secret messages in plain sight -- namely in non-secret ordinary unencrypted messages. To an observer me and my brother in law are chatting back and forth about his sprained ankle, about his game, his neighbors, his car. And somehow this mundane unassuming unsuspicious text is pregnant with a very secret message -- invisible and hence without any metadata to track.

HIPS cryptography uses the large volume of mundane, unassuming, uninteresting, privacy-irrelevant cyberspace conversations as the big pile of hay in which to conceal the proverbial needle.

A social exchange media that would deploy HIPS cryptography will allow its users to talk privately to other users -- ultimate privacy, talk without leaving any evidence that a conversation took place.

Privacy is a precursor for Freedom. If you want freedom in cyberspace, first ensure privacy, if you want privacy in cyberspace, use HIPS.

The BitMint team is looking for strategic partners * Gideon Samid, CTO, Gideon@BitMint.com

Network Skeleton Security® Strategy:

Core First, Build Up!

Consultation, Design, Tool-Box

Public facing networks are vulnerable to smart protocol-busters, and must first insure a robust skeleton: a core network element.

The unique feature of the Network Skeleton Security® Strategy (NS3) is its recognition of surface vulnerability. A network that interacts with a large array of clients, where private databases are accessed countless times a second, is protected by at most a best practice protocol, which is inherently vulnerable to an attacker that would identify protocol cracks (zero days faults). The most celebrated and most tested networks in the world have been compromised by attackers who spotted a penetration scenario that was not suspected by the protocol designers. The standard response is a fault-matching-patch. This strategy keeps the security of the system one step behind its violator. A good network security analysis would recognize this inherent vulnerability and devise a responsive strategy. The Skeleton is such a strategy.

The guiding principle of the Network Skeleton Security® Strategy (NS3) is:

1. Establish a secure core -- a skeleton for the network. 2. Focus on insuring the security of the core even when the rest of the network has been compromised. 3. Rebuild the broken-in network on the basis on the un-compromised core

The NS3 complements any surface strategy designed to prevent system penetration on the 'surface'. It is a 'just-in-case' strategy. Before we offer tools and devices we stress the Skeleton® mindset. The idea that 'there is life after a system penetration'. The notion that a robust recovery plan will allow a less burdensome surface security practice, and enable an effective mitigation and quick bounce-back after a system penetration.

We combine the Skeleton Security® strategy with the off-line core data preservation strategy, where critical data is kept ideally off the digital boundary, but at least off the reach or online hackers. Such off line base data combined with integrity uninterrupted Skeleton will effect a quick system recovery.

Before a Skeleton Security® strategy can be implemented, it is necessary to analyze the damage from a system penetration and devise a come-back plan to mitigate this damage by relying on the wholesomeness of the Skeleton which was pre designed to withstand a penetration attack.

As to the skeleton® tools, the most important of them is the hardware secure subnet: a subnet (Skeleton network) of computing centers which accepts only data flow that was decrypted by a physically secure Data Access Box (DAB). Thereby only data that was previously encrypted by a matching DAB will be able to inject into the Skeleton computer any message of meaning. A set of such computers that only accepts decrypted information will form the Skeleton®. The data it holds will be used to rebuild the surrounding network for which the secure network serves as a skeleton.

The practice and the tools are covered by BitMint know how and by a series of BitMint patents (6,823,068 * 8,229,859 * 9,471,906 * 10,395,053 * 10,445,730 * 10,467,522 * 10,523,542 * 10,541,808 * 10,541,954 * 10,594,480 * 10,608,814 )

The "Glove": Preventing Identity Theft from Public Facing Databases

Today merchants and banks store customers' personal identification records in order to authenticate their customers when they log in. These files, containing identities of millions of citizens, have become a prime hacking target. It is catastrophic when you are hit (Yahoo, Target, Office Depot), and very costly and nerve wrecking to be on guard 24/7.

BitMint now offers "The Glove" -- a solution of great conceptual simplicity: "Don't store your customers' identity information -- and hackers will have no identity informaiton to hack" -- plain and simple!

"Very clever," you comment, "but how will the merchant, or the bank, authenticate the customer as he or she logs in?"

Deploying "Glove" technology, the merchant or the bank will use special authentication data, "the Glove file", to authenticate a logged in customer presenting his or her id ("the Hand file"). This 'special authentication data' will not be a copy of the customer's identification data. So if the merchant is breached and the authentication file, (the "Glove") is hacked, the thief does not get possession of the customer's id. He ends up holding the "Glove file", not the "Hand file". Possession of the hacked "Glove" cannot be used to present a "Hand" and steal the customer's identity.

The hacker is left empty-handed, his stolen data is useless. Next time, the hacker will hack only a merchant that is not Glove-protected. Which is why over time, they all will.

Having the "Glove", not the "Hand" file in store, also prevents 'rotten apples' employees from stealing identities. If a database is breached, and the thief tries to present himself with a stolen identity, then his attempt to present the "Glove" as if it were the "Hand" will quickly alert the database on this breach that otherwise could have stayed undiscovered for a long time.

BitMint patent protected "Glove" technology can be licensed or purchased as a turn-key job.

Privacy, Freedom, Identity form the triangle of well being -- worth fighting for. We do. Experts have long given up on privacy in cyberspace, despaired of freedom on such a crowded planet, and accommodated identity theft as the new norm.

We at BitMint disagree. What technology has taken away, technology should return. Again, making best use of the modern cyber oil -- randomness -- we help stop wholesale identity theft, we help insure freedom of action to the public, and we contribute to the means for all of us to safeguard a core of privacy in this ever more see-through living space.

Efficiency Reduction Malware: Stealth, Persistent, Devastating

Little does our literature highlight the most pernicious and potentially dangerous class of malware that has found its ways to our most sensitive and critical cyber systems. Unlike the common stop-action malware that manifests itself without any ambiguity, efficiency-reducing malware simply makes searches, and computational sequences slower. Oftentimes the effect is too mild to be noticed, but it can be dialed up at will. The affected systems keep going, they appear fully functional, and trigger no inspection and no detection. The early generation of efficiency reduction malware was primitive: simply injecting nonce material, randomness, into the processed data, increasing the computational load. The more recent malware takes over a computational task, performs it with good results -- only slower. The coming generations is having AI capability to become more stealth, more penetrating, while improving as it goes.

Efficiency reducing malware (ERM) has no manifestation except with respect to computational efficiency. The replaced subroutine performs as expected. It passes the most extensive tests. No change in output. No established means to detect it. It endures and operates in complete stealth.

The means of installing ERM are based on exploiting 'weak keys' with which all prevailing ciphers can be cracked. Users inadvertently use weak keys, and adversaries spot them and use them to replace working code with same working code -- only slower. BitMint recommends the deployment of Tesla Ciphers which have no weak keys and can withstand an ERM attack. Tesla cryptography also enables secure code refreshment to clean any lurking ERM (https://eprint.iacr.org/2023/803)

Efficiency Reducing Malware is considered pre-hostilities malware, ready to be upgraded to open hostilities mode, disrupting the grid, critical civil and military systems.

The only way to meet this challenge is to refresh the operational code, from generating code residing on a 'cyber island' -- unreachable to hacking operation. BitMint patents for that purpose are on the market. A lot of foreign interest.

BitMint

info@BitMint.com

(contact form: Send us a message)