[Cryptography] New White Paper: GhostLine - Information-Theoretically Secure Multi-Party Chat

Ferecides de Siros filosofarte at protonmail.com
Wed Sep 17 22:47:52 EDT 2025


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Pierre, Jon, all,

Thank you for this fascinating and theoretically elegant idea. The application 
of Shamir's Secret Sharing to create an efficient, decentralized key distribution 
network for pairwise OTP communication is a brilliant solution 
to the n * |P| bandwidth problem.

However, my research, guided by the invaluable suggestions of Dr. Michael Kjörling, 
has since tackled what I discovered to be the more fundamental challenge in 
practice: state synchronization under concurrency.

While reducing bandwidth is valuable for large-scale deployment, the immediate 
practical problem I faced in my initial implementation was race conditions. 
When multiple participants in a group send messages simultaneously, it causes 
permanent desynchronization of their OTP states, breaking the entire system. 
My two new white papers, which I am currently finalizing (The Gentleman's 
Agreement Protocol and the revised GhostLine implementation paper), detail 
this problem and my solution.

This is why our architectures are fundamentally and intentionally incompatible:

Pierre's Scheme is designed for decentralized, pairwise conversations within a 
large pool. Its great strength is minimizing pre-distribution bandwidth for 
massive groups.

My New Architecture is designed for synchronized group broadcast within a small, 
trusted circle. Its great strength is guaranteeing perfect state synchronization 
and preventing race conditions.

For my specific use case—a small group that prioritizes perfect secrecy and 
authentication above all else—integrating secret sharing would be a step backwards. It 
would replace the simple, solved problem of distributing a single OTP file among a few 
people (which is manageable out-of-band) with a complex new problem of managing and 
coordinating thousands of individual key shares for pairwise conversations—a feature my 
system does not need or want.

The Gentleman's Agreement Protocol provides a simpler, more robust, and operationally 
secure solution for the specific problem I need to solve: synchronized group broadcast.

Pierre, I am genuinely thankful and honored that you took the time to share this idea 
with me. It is a beautiful piece of cryptographic engineering. I will definitely keep it 
in mind for other projects on my roadmap that involve decentralized, pairwise communication, 
as it is a far more elegant solution than a naive shared pad for that use case.

As soon as I finish testing the new implementation in production and complete the white 
papers, I will update the list so we can continue the conversation based on the latest design. 
I greatly value this kind of insightful feedback.

Best,

—
Hitokiri
-----BEGIN PGP SIGNATURE-----
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=5BwE
-----END PGP SIGNATURE-----


More information about the cryptography mailing list