Ottools: tools for encrypting files with one-time pads

Question

Project page: http://xyne.archlinux.ca/projects/otextract/
Update
The package was originally named "otsplit" as it only contained that tool. I have since added "otextract" (and maybe others by the time you read this) and renamed the package "ottools". The original post follows. For up-to-date information, check the project page.
Original Post
otsplit (one-time split) is a file-splitting utility based on the idea of one-time pads. There are two splitting modes. One will use a random input source (/dev/urandom by default) to generate n-1 files and then generate 1 file that can be combined with them to recreate the original file. The other mode will use a pre-existing one-time pad to generate a single output file.
In the first case the file can only be recovered with all of the generated files. In the second case it can only be recovered with the single output file and the input pad. Note that this means that if even one of the required files is lost, the data will be completely unrecoverable. That is a feature, not a bug.
I wrote this a while ago as a quick distraction while procrastinating on something else. After rediscovering it today I decided to clean it up and release it. I expect that there are common tools that do this already, possibly with security features that I have not even considered.
Some usage ideas:
Exchange a one-time pad on a CD/DVD/usb drive with someone in person and then use otsplit to securely share files via email etc.
Create an archive of files that no one should see until after your death and distribute the files to people you know. Leave instructions and a list of people who received files to be read out at your funeral. Laugh maniacally as you ponder their obliviousness before the paranoia slowly consumes you and you frantically devise a plan to ensure the destruction of at least one file.
Use it to securely host tar archives across different cloud storage providers (assuming that no provider can access the other files).
Become an international (wo)man of mystery with a 70s wardrobe and use it as one of many tools to combat comically incapable supervillains with underwater lairs.
Smuggle information out of countries with oppressive regimes.
Speak with a heavy stereotypical Russian accent while using it and refer to file recipients as comrades of the glorious people's revolution.
Don't.
Last edited by Xyne (2013-02-28 06:53:28)

Answer 1

I like the idea of otptunnel. It's too bad that it can't be used to transfer pads (I mean, each transferred bit would cost one pad bit resulting in zero net gain)
Then again, you could use that to mask network traffic. Whenever the connection is not transferring encrypted data it could transfer a new encrypted pad equal in length to the remaining pad. The network stream would appear constant to eavesdroppers with no indication of where the actual data begins or ends. In essence you would be recycling the remaining pad. I'm just thinking out loud here so I may be missing something glaringly obvious, but I don't think it would have any effect on security provided each new pad is itself secure (truly random, etc.)
Reading through your page also made me realize that I had not considered securely wiping the pad. In most cases that should probably be left to the user to ensure that the best method is used, but otextract shifts the file data forward and just truncates the end of the file. I'll look into zero-padding the end and syncing to disk before truncating.
I've seen entropy collectors for sound cards before too and they are indeed interesting. There are approaches that use webcam input too (e.g. video_entropyd), and there's also havage (with matching package in the repos). What are your thoughts on those? What about multiplexing the signals from multiple sources? Essentially, if you get just one random bit from any source in the combined stream then that position is random. The more streams you have, the greater the chance of a given bit being truly random (obviously depending on quality of the sources).
(yeah, I ramble when I'm tired)