Attacks · Channel & cryptanalysis
Session independence stops transcripts from stitching into secrets. Fresh challenge geometry means yesterday’s film does not accumulate usable correlation against φ.
~7 min readContinue: Archive unicity
The correlation attacker joins multiple successful sessions and tries to recover the secret or private map by aligning observables across rounds. The conversion is stitching: film A plus film B plus film C collapse the hypothesis cloud until φ is unique. Classical password systems reward this because the same string returns. Correlation is the multi-session upgrade of frequency: join films until the secret is unique.
Ambient authentication often reuses secrets across sessions by design. “Watch enough logins” is a free strategy when the credential is stable. Observers build ledgers that accumulate evidence. Correlation is not exotic cryptanalysis — it is the natural product of reusable secrets meeting patient archives. Reusable passwords make the upgrade free; independent ceremonies make it expensive.
Independent rounds, rotated geometry, and private maps throttle leakage so observations do not accumulate into a usable predictor. The adversary’s task collapses toward unstructured search over a vast hypothesis space rather than a stitching puzzle. Yesterday’s film does not glue onto today’s challenge to name φ. Structured ambiguity is the theory word for “many stories still fit” after the ledger is fat.
Read the dual plates as ambient success versus mechanism denial for correlation: the surface plate shows why classical estates pay; the denial plate shows which ENI6MA check family stops the conversion without dumping an NDA attack-to-stage matrix. Claims below stay model-scoped.
Correlation stitches sessions
How to read: archive films join on reuse; ambient win collapses φ. Takeaway: shared secrets across sessions make stitching free.
Ambient correlation success is the archive that intersects into one secret.
Session independence holds
How to read: stitch myths fail left; fresh challenge and ambiguity hold right. Takeaway: transcripts do not become the secret.
Session independence keeps each film from becoming glue for the next.
More film still need not uniquely determine the secret.
Ceremony sessions stay independent.
This essay presents a membership-only proof-of-knowledge protocol in which a prover convinces an observer she knows secrets without revealing them. Three intertwined ideas (balanced partitions into six equal leaves, independent ring rotations that eliminate positional anchors, and a private bijection that permutes leaf labels) throttle leakage to at most log₂6 bits per round and, in expectation, to essentially zero useful signal for predicting the next character.
Written for challengers who worry that watching multiple successful logins reveals the password and private map, or that random guessing eventually hits both, this essay explains why those paths do not work for the ENI6MA rotating-ring method (not mathematically, statistically, computationally, or physically).
Invited paper (Transactions on Information-Theoretic Security, Vol. I, No. 1, 2026) examining two contemporary pressures: the widening reach of quantum computation and ever-faster classical hardware. The authors argue for cryptographic systems whose security does not rest solely on the difficulty of a mathematical problem and that leave no recoverable trace of the secret in the observable record.
A quantitative information-theoretic analysis of how much an adversary can learn by observing a complete ENI6MA / Rosario–Wang authentication ceremony. The paper separates surface bits (Shannon entropy of symbols an observer can record) from effective bits (secret-relevant mutual information those recordings pin down), and argues that effective mutual information with the secret remains zero across rounds and ceremonies under the named model.
This paper formalizes information-theoretic boundaries of the Rosario Primitive with emphasis on the observable channel and adversarial inference limits. The central claim is that, in the ideal regime, the observable channel carries zero mutual information about the hidden state beyond a nonce-scoped event-validity residue; in the non-ideal regime, leakage remains small, measurable, and non-accumulative under proper constraints.
Session independence plus fresh challenge geometry are the mechanism claims that deny cross-session stitch attacks.