Re: Real-world steganography

2002-10-01 Thread Paul Krumviede

--On Monday, 30 September, 2002 22:15 -0500 Jeremey Barrett 
[EMAIL PROTECTED] wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Paul Krumviede wrote:
| i've seen comments in reviews of professional CD mastering
| gear that there are other, seemingly preferred, technologies,
| although i've never found details of them.
|

 The other formats of note are probably SACD and then DVD-Audio. SACD
 is multichannel 16-bit/44.1kHz... so multichannel CD without additional
 sample resolution (if I recall). SACD is not backwards compatible
 though, whereas HDCD is.

although we're wandering a bit far afield here, the other other format(s)
i was referring to are all supposedly backwards compatible, with the
original CD spec (wasn't that also some colored book?). i couldn't
tell from the review, or don't remember, what, if anything, they required
on the decoder side (but if they didn't require anything, then could it
be steganography?).

-paul




Re: Real-world steganography

2002-10-01 Thread Bram Cohen

Peter Gutmann wrote:

 I recently came across a real-world use of steganography which hides extra
 data in the LSB of CD audio tracks to allow (according to the vendor) the
 equivalent of 20-bit samples instead of 16-bit and assorted other features.

I don't think that's really 'steganography' per se, since no attempt is
made to hide the fact that the information is in there. The quasi-stego
used is just to prevent bad audio artifacts from happening.

-Bram Cohen

Markets can remain irrational longer than you can remain solvent
-- John Maynard Keynes




Real-world steganography

2002-10-01 Thread Peter Gutmann

I recently came across a real-world use of steganography which hides extra
data in the LSB of CD audio tracks to allow (according to the vendor) the
equivalent of 20-bit samples instead of 16-bit and assorted other features.
According to the vendors, HDCD has been used in the recording of more than
5,000 CD titles, which include more than 250 Billboard Top 200 recordings and
more than 175 GRAMMY nominations, so it's already fairly widely deployed.
From http://www.hdcd.com/partners/proaudio/overview.html:

[...]

Hidden Code Addition/Output Dither/Quantization

The final step in the reduction to 16 bits is to add high-frequency weighted
dither and round the signal to 16-bit precision. The dither increases in
amplitude in the frequency range of 16 to 22.05 kHz, leaving the noise floor
flat below 16 kHz where the critical bands of hearing associated with tonality
occur. As part of the final quantization, a pseudo-random noise hidden code is
inserted as needed into the least significant bit (LSB) of the audio data. The
hidden code carries the decimation filter selection and Peak Extend and Low
Level Range Extend parameters. Inserted only 2?5 percent of the time, the
hidden code is completely inaudible-effectively producing full 16-bit
undecoded playback resolution. The result is an industry-standard 44.1-kHz,
16-bit recording compatible with all CD replication equipment and consumer CD
players.

[...]

The paper describing the process is available under the somewhat misleading
name http://www.hdcd.com/partners/proaudio/AES_Paper.pdf.  The description of
the stego en/decoding process is on p.15 (it's a rather long excerpt, but it's
interesting stuff):

As part of the final quantization, a hidden code side channel is inserted into
the LSB when it is necessary for the encoder to inform the decoder of any
change in the encoding algorithm. It takes the form of a pseudo-random noise
encoded bit stream which occupies the least significant bit temporarily,
leaving the full 16 bits for the program material most of the time. Normally,
the LSB is used for the command function less than five percent of the time,
typically only one to two percent for most music. Because the hidden code is
present for a small fraction of the time and because it is used as dither for
the remaining 15 bits when it is inserted, it is inaudible. This was confirmed
experimentally with insertion at several times the normal fraction of time.

[...]

The mechanism which allows insertion of commands only when needed consists of
encapsulating the command word and parameter data in a packet. A
synchronizing pattern is prepended to the data and a checksum is appended. The
resulting packet is then scrambled using a feedback shift register with a
maximal length sequence and inserted serially, one bit per sample, into the
LSB of the audio data. The decoder sends the LSB's of the audio data to a
complementary shift register to unscramble the command data. A pattern
matching circuit looks for the synchronizing pattern in the output of the
descrambler, and when it finds it, it attempts to recover a command. If the
command has a legal format and the checksum matches, it is registered as a
valid packet for that channel. The arrival of a valid packet for a channel
resets a code detect timer for that channel. If both channels have active
timers, then code is deemed to be present and the filter select data is
considered valid immediately. However, any command data which would effect the
level of the signal must match between the two channels in order to take
effect. The primary reason for this is to handle the case where an error on
one channel destroys the code. In such a case, the decoder will mistrack for a
short time until the next command comes along, which is much less audible than
a change in gain on only one channel, causing a shift in balance and lateral
image movement. If either of the code detect timers times out, then code is
deemed not to be present, and all commands are canceled, returning the decode
system to its default state. If the conditions on the encoder side are not
changing, then command packets are inserted on a regular basis to keep the
code detect timers in the decoder active and to update the decoder if one
starts playing a selection in the middle of a continuous recording.

Since the decoder is constantly scanning the output of the de-scrambler shift
register for valid command packets even when none are present, the possibility
exists that there may be a false trigger. For audio generated by the encoder,
this possibility is eliminated in the absence of storage and transmission
errors by having the encoder scan the LSB of the audio data looking for a
match. If a match to the synchronizing pattern is found, the encoder inverts
one LSB to destroy it.

Modern digital storage and transmission media incorporate fairly sophisticated
error detection and correction systems. Therefore, we felt that only moderate
precautions were necessary in 

Re: Real-world steganography

2002-10-01 Thread Adam Shostack

On Mon, Sep 30, 2002 at 07:31:19PM -0700, Paul Krumviede wrote:
| --On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann 
| [EMAIL PROTECTED] wrote:
| 
| I recently came across a real-world use of steganography which hides extra
| data in the LSB of CD audio tracks to allow (according to the vendor) the
| equivalent of 20-bit samples instead of 16-bit and assorted other
| features. According to the vendors, HDCD has been used in the recording
| of more than 5,000 CD titles, which include more than 250 Billboard Top
| 200 recordings and more than 175 GRAMMY nominations, so it's already
| fairly widely deployed.
...
| i've seen comments in reviews of professional CD mastering
| gear that there are other, seemingly preferred, technologies,
| although i've never found details of them.

The two that spring to mind are HDCD and XRCD.  I'd never dug into how
they're recorded, being much more interested in playing with things
closer to the output stage, like speaker resonance control and
electrical hum elimination...

Adam


-- 
It is seldom that liberty of any kind is lost all at once.
   -Hume




Re: Real-world steganography

2002-10-01 Thread Paul Krumviede

--On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann 
[EMAIL PROTECTED] wrote:

 I recently came across a real-world use of steganography which hides extra
 data in the LSB of CD audio tracks to allow (according to the vendor) the
 equivalent of 20-bit samples instead of 16-bit and assorted other
 features. According to the vendors, HDCD has been used in the recording
 of more than 5,000 CD titles, which include more than 250 Billboard Top
 200 recordings and more than 175 GRAMMY nominations, so it's already
 fairly widely deployed.

maybe. i'm not sure how many players support it (my spectral D/A
convertor does, but then some of the people at spectral seem to
have invented HDCD). while the CDs i have that use it sound
pretty good, i don't have any good way to compare them when
played back over a non-HDCD capable convertor (i could hook
up one of my computer CD drives, but that doesn't seem fair
compared to the spectral transport-D/A combination).

but when i do play such CDs on other gear, i don't notice any
audible degradation, so it isn't obviously harmful.

i've seen comments in reviews of professional CD mastering
gear that there are other, seemingly preferred, technologies,
although i've never found details of them.

-paul




Re: Real-world steganography

2002-10-01 Thread Sampo Syreeni

On 2002-10-01, Ben Laurie uttered to Peter Gutmann:

Yeah, right - and green felt-tip around the edges of your CD improves
the sound, too.

I'm not sure about HDCD as a technology, but the principle is sound. If we
can compress sound transparently, we can also transparently embed quite a
lot of data into the part which is perceptually irrelevant. We might also
depart with perceptual equivalence and go with perceptual similarity
instead -- e.g. multiband compress the audio, and embed data which allows
us to expand to a higher perceptual resolution. Whatever the
implementation, putting data in the gap between statistical (i.e.
computed against a Markov model) and perceptual (against a perceptual
similarity model) entropy which compensates for some of the perceptual
shortcomings (like total dynamic range) of a particular recording
technology seems like an excellent idea.

However, applications like these have very little to do with steganography
proper. In this case, we can (and want) to fill up the entire gap between
statistical and perceptual entropy estimates with useful data, leaving us
with signals which have statistical entropies consistently higher than
we'd expect of a typical recording with similar perceptual
characteristics. That is, the encoded signal will appear manifestly random
compared to typical unencoded material from a similar source, and we can
easily see there is hidden communication going on. Such encodings will be
of little value in the context of industrial strength steganography used
for hidden communication.

Steganography used in the latter sense will also have to be imperceptible,
true, but but here the entropic gap we're filling is the one between the
entropy estimates of our best model of the source material vs. that of the
adversary's. Be the models Markov ones, perceptual, something else, or
composites of the above. Consequently the margin is much thinner
(bandwidths are probably at least a decade or two lower), and the aims
remain completely separate.

Consequently, I don't believe encodings developed for the first purpose
could ever be the best ones for the latter, or that HDCD-like endeavors
really have that much to do with the subject matter of this list.
-- 
Sampo Syreeni, aka decoy - mailto:[EMAIL PROTECTED], tel:+358-50-5756111
student/math+cs/helsinki university, http://www.iki.fi/~decoy/front
openpgp: 050985C2/025E D175 ABE5 027C 9494 EEB0 E090 8BA9 0509 85C2




Re: Real-world steganography

2002-10-01 Thread Jeremey Barrett

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Paul Krumviede wrote:
| --On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann
|
| maybe. i'm not sure how many players support it (my spectral D/A
| convertor does, but then some of the people at spectral seem to
| have invented HDCD). while the CDs i have that use it sound
| pretty good, i don't have any good way to compare them when
| played back over a non-HDCD capable convertor (i could hook
| up one of my computer CD drives, but that doesn't seem fair
| compared to the spectral transport-D/A combination).
|

The extra 4 bits add quite a bit, subjectively. I've compared the same
CD on the same system with an HDCD player and non-HDCD player.

| but when i do play such CDs on other gear, i don't notice any
| audible degradation, so it isn't obviously harmful.
|
| i've seen comments in reviews of professional CD mastering
| gear that there are other, seemingly preferred, technologies,
| although i've never found details of them.
|

The other formats of note are probably SACD and then DVD-Audio. SACD
is multichannel 16-bit/44.1kHz... so multichannel CD without additional
sample resolution (if I recall). SACD is not backwards compatible
though, whereas HDCD is.

DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
a huge difference on pretty good or better gear.

Regards,
Jeremey.
- --
Jeremey Barrett [[EMAIL PROTECTED]]Key: http://rot26.com/gpg.asc
GnuPG fingerprint: 716E C811 C6D9 2B31 685D 008F F715 EB88 52F6 3860
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9mRND9xXriFL2OGARAp52AKCk2otuMwkRyhssJw/RnsinKM2sewCfRlUf
/Fz7ezIMUdKAolx/n/Ti89w=
=IsJf
-END PGP SIGNATURE-




Re: Real-world steganography

2002-10-01 Thread Tyler Durden

The other formats of note are probably SACD and then DVD-Audio. SACD
is multichannel 16-bit/44.1kHz... so multichannel CD without additional
sample resolution (if I recall). SACD is not backwards compatible
though, whereas HDCD is.

DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
a huge difference on pretty good or better gear.

You kinda got it mixed up. SACD (Sponsored by SONY) is actually being 
targeted for 24/96 (or was that 24/88...I can't remember) for 2-channel 
audio, while DVD-A (also 24/96, I believe)is being pushed towards 
multichannel (5+1) audio.

Neither will play in a standard DVD player, though some discs will contain a 
16/48kHz version for regular DVD players.

As for backward compatibility, though, SACD has the capability to contain a 
CD layer AND an SACD layer, and SONY has announced that they'll be releasing 
a lot of stuf like this (like the Stones remastered back catalogue, I 
think). And theoretically, they'll price the discs at under $20 with the 
idea that non-audiophiles can buy them and play them in a standard CD player 
now, and then get the high bitrate version when they  buy an SACD player one 
day. DVD-A will always require a special DVD player--there is no CD layer 
specified (CD and DVD use different lasers and have different pit 
sizes--they are intrinisically incompatible at the physical layer.)

As for steganography, a problem that audiophiles are pointing out is that 
DVD-A contains some kind of anti-piracy watermarking that degrades the sound 
as compared to SACD. Meanwhile, the marketing for DVD-A is all confused, so 
it's likely DVD-A will be DOA in a few years (a lot of folks don't believe 
there's a market for 5+1 audio anyway). In addition, there are not a lot of 
5+1 audio recordings anyone wants to hear, and remixing 2 channels into 5+1 
is always a questionable process.





From: Jeremey Barrett [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: Peter Gutmann [EMAIL PROTECTED], 
[EMAIL PROTECTED],   [EMAIL PROTECTED]
Subject: Re: Real-world steganography
Date: Mon, 30 Sep 2002 22:15:21 -0500

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Paul Krumviede wrote:
| --On Tuesday, 01 October, 2002 13:54 +1200 Peter Gutmann
|
| maybe. i'm not sure how many players support it (my spectral D/A
| convertor does, but then some of the people at spectral seem to
| have invented HDCD). while the CDs i have that use it sound
| pretty good, i don't have any good way to compare them when
| played back over a non-HDCD capable convertor (i could hook
| up one of my computer CD drives, but that doesn't seem fair
| compared to the spectral transport-D/A combination).
|

The extra 4 bits add quite a bit, subjectively. I've compared the same
CD on the same system with an HDCD player and non-HDCD player.

| but when i do play such CDs on other gear, i don't notice any
| audible degradation, so it isn't obviously harmful.
|
| i've seen comments in reviews of professional CD mastering
| gear that there are other, seemingly preferred, technologies,
| although i've never found details of them.
|

The other formats of note are probably SACD and then DVD-Audio. SACD
is multichannel 16-bit/44.1kHz... so multichannel CD without additional
sample resolution (if I recall). SACD is not backwards compatible
though, whereas HDCD is.

DVD-Audio is really the way to go, though... 24-bit/96kHz multichannel
or up to 192kHz two-channel. Lots more bits, lots more samples. It makes
a huge difference on pretty good or better gear.

Regards,
Jeremey.
- --
Jeremey Barrett [[EMAIL PROTECTED]]Key: http://rot26.com/gpg.asc
GnuPG fingerprint: 716E C811 C6D9 2B31 685D 008F F715 EB88 52F6 3860
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9mRND9xXriFL2OGARAp52AKCk2otuMwkRyhssJw/RnsinKM2sewCfRlUf
/Fz7ezIMUdKAolx/n/Ti89w=
=IsJf
-END PGP SIGNATURE-




_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Re: Real-world steganography

2002-10-01 Thread Bill Stewart

At 09:38 PM 09/30/2002 -0700, Bram Cohen wrote:
Peter Gutmann wrote:
  I recently came across a real-world use of steganography which hides extra
  data in the LSB of CD audio tracks to allow (according to the vendor) the
  equivalent of 20-bit samples instead of 16-bit and assorted other features.

I don't think that's really 'steganography' per se, since no attempt is
made to hide the fact that the information is in there. The quasi-stego
used is just to prevent bad audio artifacts from happening.

Traditional digital telephone signalling uses a robbed-bit method that
steals the low-order bit from every sixth voice sample to carry information
like whether the line is busy or idle or wants to set up a connection.
(That's why you only get 56kbps and not 64kbps in some US formats,
since it doesn't want to keep track of which low bits got robbed.)

In a sense both of these are steganography, because they're trying to
hide the data channel from the audio listener by being low level noise
in ways that equipment that isn't looking for it won't notice.

That's not really much different from encoding Secret Data in the LSB
of uncompressed graphics or audio - it's about the second-crudest
form of the stuff, and if you think there are Attackers trying to
decide if you're using stego, you need more sophisticated stego -
at minimum, encoding the stegotext so it looks like random noise,
or encoding the stegotext with statistics resembling the
real noise patterns, or whatever.  The definition of hidden writing
doesn't specify how hard you tried to hide it or how hard the
Attacker is looking - you need to Bring Your Own Threat Model.


Since I don't speak Audiophile Engineering / Human perceptual modelspeak,
which the paper was written in, I wasn't able to figure out where the
HDCD stuff hides the extra bits.  Are they really there (in the CDROM's
error-correction bits or something)?  It sounded like they were either
saying that they make part-time use of the one LSB bit to somehow encode
the LSB and 4 more bits, which sounded really unlikely given that there
weren't any equations there about the compression models, or else that they
had some perceptual model and were using that to make a better choice of LSB
than a simple 50% cut-off of the A-to-D converter (more absolute distortion,
but better-sounding distortion.)  Or did I miss the implications of the
reference to oversampling and the real difference is that HDCD disks
really have more pixels on the disk with only the LSB different,
so a conventional reader reads it fine but needs the ECC to get the LSB?

A separate question is - so is there some internet-accessible list of
disks using HDCD, or do I just have to look at the labels for a logo?




Re: Real-world steganography

2002-10-01 Thread Ben Laurie

Peter Gutmann wrote:
 I recently came across a real-world use of steganography which hides extra
 data in the LSB of CD audio tracks to allow (according to the vendor) the
 equivalent of 20-bit samples instead of 16-bit and assorted other features.
 According to the vendors, HDCD has been used in the recording of more than
 5,000 CD titles, which include more than 250 Billboard Top 200 recordings and
 more than 175 GRAMMY nominations, so it's already fairly widely deployed.

Yeah, right - and green felt-tip around the edges of your CD improves 
the sound, too.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html   http://www.thebunker.net/

There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit. - Robert Woodruff