tfc-otp

Not if the encrypted text was created on a trusted device. Consider that, as it is now, encrypted data on the Internet traverses numerous untrusted devices. For an extreme example, see https://github.com/maqp/tfc-otp

The real solution is high assurance systems: those designed in a rigorous way with an argument that they'll remain secure against any known classes of attack. That's every layer of the stack and sideways as my proprietary framework [1] used to show. Here's an example [2] of what that's like applied to Tor. Ottela's Tinfoil Chat is only one I know that applies high assurance at the design level to eliminate risk of High Strength Attackers. He took a lot of feedback from us on Schneier's blog and applied it well. Client-side encryption using C libraries on Linux or whatever is just asking to be hacked. Best will be secure hardware, drivers, kernel, and trusted components. See CHERI processor [4], EROS documentation [5] (esp "Principle-driven...") and Mikro-SINA VPN [6] for examples of The Right Thing in security-critical development. Need m

The best path to strong security has always been hardware isolation, right? So now that we have mass-market microcomputers, why bother with VMs? What do you think of Tinfoil Chat[0]? The notebook form factor could contain several microcomputers, with optical isolation, or even outright air gapping. But closed-source hardware and firmware is still problematic :( [0] https://github.com/maqp/tfc-otp