background gif

Attacks · Channel & cryptanalysis

Correlation

Session independence stops transcripts from stitching into secrets. Fresh challenge geometry means yesterday’s film does not accumulate usable correlation against φ.

~7 min readContinue: Archive unicity

Opening

What the attacker wants

The correlation attacker joins multiple successful sessions and tries to recover the secret or private map by aligning observables across rounds. The conversion is stitching: film A plus film B plus film C collapse the hypothesis cloud until φ is unique. Classical password systems reward this because the same string returns. Correlation is the multi-session upgrade of frequency: join films until the secret is unique.

How it works today

Ambient authentication often reuses secrets across sessions by design. “Watch enough logins” is a free strategy when the credential is stable. Observers build ledgers that accumulate evidence. Correlation is not exotic cryptanalysis — it is the natural product of reusable secrets meeting patient archives. Reusable passwords make the upgrade free; independent ceremonies make it expensive.

Why it fails against one-shot proofs

Independent rounds, rotated geometry, and private maps throttle leakage so observations do not accumulate into a usable predictor. The adversary’s task collapses toward unstructured search over a vast hypothesis space rather than a stitching puzzle. Yesterday’s film does not glue onto today’s challenge to name φ. Structured ambiguity is the theory word for “many stories still fit” after the ledger is fat.

Read the dual plates as ambient success versus mechanism denial for correlation: the surface plate shows why classical estates pay; the denial plate shows which ENI6MA check family stops the conversion without dumping an NDA attack-to-stage matrix. Claims below stay model-scoped.

Correlation stitches sessions

How to read: archive films join on reuse; ambient win collapses φ. Takeaway: shared secrets across sessions make stitching free.

Ambient correlation success is the archive that intersects into one secret.

Session independence holds

How to read: stitch myths fail left; fresh challenge and ambiguity hold right. Takeaway: transcripts do not become the secret.

Session independence keeps each film from becoming glue for the next.

Where it shows up

Watch it fail

Go deeper

  • No Correlation Attack

    This essay presents a membership-only proof-of-knowledge protocol in which a prover convinces an observer she knows secrets without revealing them. Three intertwined ideas (balanced partitions into six equal leaves, independent ring rotations that eliminate positional anchors, and a private bijection that permutes leaf labels) throttle leakage to at most log₂6 bits per round and, in expectation, to essentially zero useful signal for predicting the next character.

Formal note

Session independence plus fresh challenge geometry are the mechanism claims that deny cross-session stitch attacks.