The Correct FES Terminology
In classical OTP terminology, the cryptographic key is the full-length pad or keystream that acts upon the plaintext. In FES, the human input is called the Password, but the Password is not the Shannon key equivalent.
The Password participates in Stage 1 Portal construction and does not act directly upon the payload. The Fractal Stream emerges through Hyperchaotic Fractal Navigation and is the FES object corresponding to Shannon’s OTP key.
The Fractal Stream Has the Required Randomness Quality
Shannon did not provide a standalone formal test or metric for randomness. In practice, stream quality is evaluated through generally accepted statistical and structural measures.
FES contains no RNG and no PRNG. The Fractal Stream is not generated by a conventional random-number function. It emerges from Hyperchaotic Fractal Navigation, leveraging the proven infinite complexity of the Mandelbrot Set.
Public, measurable and independently testable
The public FES Gauge exposes the Fractal Stream. It provides direct visualisation, accepted stream-quality measures, and raw stream download for independent analysis using any external test suite or methodology.
The FES Gauge also provides a visualisation of the Fractal Stream by mapping to RGB colors. This allows the human eye, very adept at noticing any pattern, to perform a quick check on stream quality.
| FES Gauge measure | Quality indicated |
|---|---|
| Entropy | Byte-distribution uniformity; maximum 8 bits per byte. |
| Average byte value | Balanced output centred near 127.5. |
| Chi-square | Closeness to uniform byte distribution. |
| Serial correlation | Dependence between adjacent bytes; ideal near zero. |
| Compression resistance | Resistance to discoverable structure, repetition and exploitable organisation. |
| Stream visualisation | Direct exposure of clustering, banding, alignment or repeated structure. |
The Fractal Stream Covers the Whole Payload
A Shannon OTP key must be at least as long as the plaintext. FES has met this requirement natively since its inception because FES is a whole-of-payload cryptographic architecture.
Stage 2 produces the Fractal Stream for the complete configured payload. Where multiple passes are selected, the stream continues across the full payload for every pass.
Stage 3 then applies the Fractal Stream across the entire payload through whole-of-payload overwrite. FES does not generate a short pad and reuse it across a longer message. Full stream coverage is inherent in the FES transformation design.
Auto Fractal OTP Guarantees Single Use
The remaining Shannon requirement is that the key-equivalent stream be used only once.
FES v3.0 introduces Auto Fractal OTP. For every transform, FES creates a new GUID and uses its raw 16-byte value as the Fractal OTP. The GUID OTP is not added to the Password. It is applied independently to shift the Fractal Portal away from the Password/Silo location to a new, unique location.
Automatic extraction
During extraction, FES reads the GUID OTP directly from the ciphertext, removes it from the raw ciphertext boundary, and uses it with the correct Password and Silo to reconstruct the same shifted Fractal Portal. The identical Fractal Stream then re-emerges for payload recovery.
The GUID OTP is public by design
The GUID OTP is carried openly with the ciphertext. Its purpose is uniqueness, not secrecy. Public knowledge of the GUID OTP provides no advantage without the correct Password and Silo, because the GUID alone cannot identify or reconstruct the Fractal Portal and cannot reproduce the Fractal Stream.
You can test this with the FES Fractal Encryption Demo. Note that the Ciphertext changes for every transform.
The Shannon Trifecta
FES v3.0 satisfies each Shannon OTP requirement through a distinct native FES mechanism.
Randomness Quality
Hyperchaotic Fractal Navigation leverages Mandelbrot infinite complexity to produce Fractal Streams with consistently high statistical and structural quality.
Whole-Payload Length
The Fractal Stream is generated for the complete payload across every selected pass. It is never shorter than the plaintext it transforms.
Single Use
A new public 16-byte GUID OTP shifts the Fractal Portal for every transform, automatically guaranteeing a unique Fractal Stream.
What this means
By achieving Shannon OTP compliance, FES v3.0 extends its computational security with the information-theoretic property of Perfect Secrecy.
Perfect Secrecy means the ciphertext provides no information about the plaintext. Observing the ciphertext gives an attacker no advantage whatsoever in determining the original message.
This is fundamentally different from computational difficulty. Computational difficulty assumes an attacker cannot solve an infeasible mathematical problem, it is infeasible due to inadequate computational resources. Perfect Secrecy removes the problem entirely. There is nothing to solve because the ciphertext leaks nothing.
Perfect Secrecy is the theoretical limit of cryptographic confidentiality. No cryptographic property can provide stronger protection than revealing zero information about the plaintext.
No Privileged Oracle
Whole-of-payload transformation means that every ciphertext-length bit combination is a valid decryption candidate under an appropriately corresponding Fractal Stream. This includes every meaningful document, image, executable, database, or any other possible plaintext of the same length.
Consequently, the ciphertext provides no privileged oracle that distinguishes the correct plaintext from the complete candidate space. Every candidate remains equally plausible , including all sensible combinations. Only when the correct Fractal Stream is applied can the payload be recovered.
This is the practical consequence of Perfect Secrecy. The ciphertext contains no information that favours one plaintext over another because every possible plaintext remains represented within the complete ciphertext-length search space.
Historical Note
FES was not designed as an implementation of Shannon’s One-Time Pad.
Fractal Stream quality and whole-of-payload stream coverage were native properties of the technology from its earliest implementation. Their alignment with Shannon’s requirements was recognised retrospectively.
With the rollout of Auto Fractal OTP in FES v3.0, the third requirement—guaranteed single use—became automatic. FES reached Shannon OTP compliance through its own independent fractal architecture.
FES v3.0 achieves the
Complete Shannon OTP Trifecta.
High-quality Fractal Stream. Whole-of-payload coverage. Guaranteed one-time use.