NOTICE:
This content is in the "archives" of a retired blog called Gadgetopia. It has been moved to this subdomain as it is no longer considered relevant to the site. It is being hosted here for a indeterminate period of time. Its existence at this URL is not guaranteed, and it may be removed at any time. If you would like to refer to this content in the future, you are encouraged to save it to your local file system.

Some content from Gadgetopia was moved to the technical blog on deanebarker.net

Steganography

Originally published by "dbarker" on 2004-04-15 07:12:00Z

Steganography is very cool. No, it’s not a dinosaur &mdash it’s a method of sending hidden messages so that no one knows a message has been sent.

Well, that’s just boring ol’ cryptography, you say. No – when you encrypt a message and send it, anyone who intercepts the communication can tell that it’s an encrypted message. They just can’t read it.

Steganography disguises the messages as something else, so the interceptor doesn’t even know there’s a message buried in there. To read the message, first you have to know how to expose it. Once that’s been done, then the exposed message may or may not be encrypted (just hiding the message may be enough to secure it).

Here’s an example that makes the email rounds every once in a while.

Memo to the Director Subject: Letter of Recommendation

—————————————————————-

Jane S., a chief sub editor and editor, can always be found hard at work in her cubicle. Jane works independently, without wasting company time talking to colleagues. She never thinks twice about assisting fellow employees, and she always finishes given assignments on time. Often Jane takes extended measures to complete her work, sometimes skipping coffee breaks. She is a dedicated individual who has absolutely no vanity in spite of her high accomplishments and profound knowledge in her field. I firmly believe that Jane can be classed as a high-caliber employee, the type which cannot be dispensed with. Consequently, I duly recommend that Jane be promoted to executive management, and a proposal will be sent away as soon as possible.

Project Leader ————————————————————————————————

(Later that afternoon another memo was sent…)

Memo to the Director:

Sorry about the earlier memo. Jane was looking over my shoulder as I wrote it. Kindly read every other line (i.e. 1, 3, 5, 7…) for my true assessment of her.

Regards, Project Leader

This is a perfect example of steganography. A message disguised as something else with a “key” (reading every other line) provided to expose the original message.

Another great example of a few years ago was spammimic. At this site, you can write a message, then have it “encrypted” as spam. The message comes out looking like a regular spam message that no one would think twice about. For example, this message:

I like penguins.

…is “spamified” as this…

Dear Friend , Especially for you – this red-hot intelligence. If you no longer wish to receive our publications simply reply with a Subject: of “REMOVE” and you will immediately be removed from our mailing list…

The full message is about 1,000 words of garbage. I’m still not quite sure how they do it, but I’m pretty sure it has something to do with numbers that appear throughout the text (“…being sent in compliance with Senate bill 1623 , Title 9 ; Section 309…” etc.) The numbers seem to be the thing that change from use to use.

But, the big glamour in steganography these days is encrypted messages in other files, usually pictures. This news story discussed how Al Queda may have used steganography to send communications to sleeper cells:

They’re hidden using free encryption Internet programs set up by privacy advocacy groups. The programs scramble the messages or pictures into existing images. The images can only be unlocked using a “private key,” or code, selected by the recipient, experts add. Otherwise, they’re impossible to see or read.

I’ve done this for fun, and it’s incredibly simple. Download.com has a handful of tools available. The message isn’t confined to text – you can take a complete file and bury it in another file. You can just hide it, or you can encrypt it and hide it. The cloak-and-dagger aspects of this are fascinating.

The technical basis is pretty simple. Each byte gets it’s right-most bit re-purposed to hide the file. This results in a slight loss of quality in images, but not enough that the human eye will notice. It also means that as the hidden file gets larger, the “parent” needs to be larger as well so it has enough bytes to hide its cargo.

Wikipedia has a great page on steganography. They include a sample image of a tree that turns into a picture of a cat by just cranking the brightness to the max. Cool stuff.

Here is a picture of a bunny. There is no secret message in this picture. I swear.

Comment by "dave" on 2004-04-15 07:59:00Z
A book I picked up a while back -- The Bible Code, by Michael Drosnin -- had something similar to this, only in reverse. Drosnin claimed that prophetic messages could be derived from the text of the Bible using a skip code -- every eighth character, or fifteenth, or 1,284th, in a sentence forms a word or phrase or message. He even had some fairly convincing examples of it, like a prediction of the assassination of Yhitzak Rabin, including the name of the assassin. I'm not fully convinced that there really is a code embedded in the Bible. Many other authors have tried to debunk his work by showing that you can pull the same trick with the text of other books, like Moby Dick or War and Peace. I suppose there is a random aspect to decoding a message from any given string of characters.
Comment by "dz" on 2004-04-15 13:42:00Z
Check out the movie "Pi": "Dark, hyperkinetic movie about a paranoid mathematician searching for a key number which will unlock the universal patterns found in nature." [http://www.imdb.com/title/tt0138704/](http://www.imdb.com/title/tt0138704/)
Comment by "Pahvi67" on 2009-08-02 11:16:00Z
How can I hide an image inside another image just like in the wikipedia example, and how to do it backwards, just cranking up the brightness doesnt reveal the picture, I tryed doing so for the three image in wikipedia. If someone can help me please E-mail me at jonivirta94@gmail.com
Comment by "som" on 2010-07-04 13:52:00Z
well...im doing project on steganography,i dont dnt know how to hide the data in image.plz send me the corresponding data.. plz send to theegalasomu@gmail.com thank you...
Comment by "nethmi" on 2011-03-11 12:33:00Z
are the steganography and the encoding (pub key & pvt key) equal? I read a article on [ http://hareenlaks.blogspot.com/2010/05/what-is-steganography.html](http://hareenlaks.blogspot.com/2010/05/what-is-steganography.html) which says they are equal but I'm not sure . what is your idea?