securitylab_n•July 16, 2026•🇷🇺Translated from Russian

DNA Origami Turns Secrets into Molecular Morse Code: Multi-Key Nano-Safe Resists Single-Party Attacks

Mathematics has protected banking operations, government communications, and personal correspondence for decades. Modern cryptography converts plain text into unreadable data without the correct key. However, growing computational power and the rise of quantum computers are driving the search for new methods of storing secrets. Chinese researchers have now proposed using DNA for this task.

Scientists created a multi-level encryption system based on DNA origami. Molecules assemble into tiny rectangular plates where the message is written using dots and dashes in Morse code. After encoding, the flat structure folds into a tube that physically hides the pattern. The data can only be read with the correct molecular key that unfolds the tube.

DNA has long attracted information-storage specialists. The molecule can hold enormous volumes of data, and its base sequence can be programmed with high precision. In biomolecular cryptography, protection relies not on conventional computer algorithms but on the properties of DNA, proteins, bacteria, and their reactions.

The researchers chose DNA origami for the new system. This method folds a long single-stranded molecule into a desired shape using hundreds of short helper strands called staple strands. Each staple binds to a specific region of the main molecule and forces it to bend at the right location.

The device is built from flat DNA rectangles. Researchers placed elements representing dots and dashes on their surfaces. Dots were created from small DNA loops resembling dumbbells. Dashes were formed through a chain hybridization reaction in which short molecules sequentially connect to create a long double-stranded track.

The arrangement of dots and dashes encoded letters according to a pre-defined table. After writing the message, scientists attached special locking strands to the edges of the rectangle. Complementary sections found each other, joined, and pulled the plate into a tube.

Once folded, the pattern was hidden inside the structure. A scanning instrument could no longer detect the positions of dots and dashes, so the contents remained concealed even with physical access to the sample.

All messages were divided into blocks of equal size. This ensured that the length and shape of the DNA construct did not reveal the number of characters or the structure of the original text. An observer saw identical tubes regardless of the data inside.

Decryption required a verification key, denoted Vk, consisting of six types of unlocking DNA strands. Their sequences matched the locking regions exactly and bound more strongly than the tube edges bound to each other.

Adding the key caused the locking connections to break apart and the tubular structure to unfold back into a flat rectangle. Reaction efficiency reached 99.7 percent. Folding took about eight hours, while the reverse process completed in several minutes.

The unfolded surface was examined using atomic force microscopy. The method does not use ordinary light; a thin probe scans the sample and records minute height changes, allowing the instrument to build images of objects only a few nanometers in size.

The resulting image clearly showed the dots and dashes. Researchers compared the pattern with the code table and reconstructed the original message. The full cycle was tested on the phrase “JUNE6 INVASION NORMANDY”.

Transitioning between flat and tubular forms provides 2,576 possible key variants. Without the correct set of unlocking strands, the structure does not unfold and the internal pattern remains inaccessible to scanning.

Protection operates on multiple levels. First, content is converted into a sequence of dots and dashes. The elements are then recorded on a DNA nanostructure. The surface folds to hide the pattern physically. Recovering the message requires both the correct molecular key and equipment capable of resolving the pattern on the unfolded plate.

The entire encryption and decryption process took approximately ten hours. Electronic systems perform similar operations far faster, so DNA origami is not yet suitable for everyday correspondence or real-time data transmission.

The main value of the experiment lies not in speed. The scientists demonstrated that DNA molecules can be programmed to perform several cryptographic operations: recording a message, changing the carrier’s shape, concealing data, and revealing it only after the correct key is added.

The DNA system remains a laboratory prototype requiring sophisticated equipment and lengthy chemical reactions. Nevertheless, the work shows that future information-protection tools may rely not only on mathematical algorithms but also on the physical properties of programmable molecules.

Related articles

Habr•Other

How a Personal Site Counts Bots Without Storing Any IPs: Pure PHP, No Database, Strict CSP and 160 Tests

A personal website built entirely in pure PHP without frameworks or databases demonstrates advanced defensive security practices while tracking bot activity from an SSH honeypot. The site stores all content in a single JSON file with atomic writes and automatic backups, eliminating database-related attack surfaces and simplifying deployment to folder copying. Strict Content-Security-Policy rules prohibit inline styles and scripts without nonces, forcing the use of SVG attributes, CSSOM updates, and JSON data blocks instead of direct attribute injection. Over 160 automated tests written in PHP attack the site with XSS payloads, CSRF attempts, path traversals, and malformed Markdown to verify that no malicious output reaches the browser. Bot identification relies on behavioral signatures derived from the first twelve cleaned commands of each session, combined with HASSH fingerprints and activity patterns, allowing the site to report unique bot families and address counts without ever publishing IPs. Additional browser-based tests using Chromium validate accessibility, performance budgets, and CSP compliance across desktop and mobile viewports. The entire system runs with zero external dependencies and integrates tests directly into the deployment pipeline.

AntiMalware•Other

Russian Finance Ministry Seeks Central Bank Reports on Systematic P2P Transfers to Tax Authorities

The Russian Ministry of Finance has proposed amendments requiring the Central Bank to share data with the Federal Tax Service on individuals whose bank accounts show signs of regular income received from other private citizens. The changes target article 85 of the Tax Code and form part of the budget package bill numbered 617-9. Under the new rules, the Central Bank would identify such citizens through transaction analysis and transmit the information according to a future agreement with the tax service. The Federal Tax Service would also gain expanded powers to request bank statements from non-entrepreneurs without needing prior debt collection or audit triggers. If approved, the provisions would take effect on 1 January 2027 and apply to operations conducted after 1 January 2026. Separate bills under discussion would impose monthly transfer limits of 30,000 rubles on suspected clients starting in 2028 and require the tax service to notify the Central Bank about account openings and income categories.

安全客•Other

Baidu Launches Ciyuan Exchange to Establish Trust Standards for AI Model Trading

Baidu Intelligent Cloud has introduced the Ciyuan Exchange, a dedicated trading platform for large AI models that aims to solve quality verification and credit issues in an increasingly crowded market. The platform, unveiled at the Baidu World 2026 Conference, already hosts over 100 supply resources with daily calls exceeding 50 million and daily token usage surpassing 700 billion. Founder Li Yanhong positioned the exchange as an infrastructure layer that moves beyond simple model aggregation toward verifiable identity, ongoing performance monitoring, and supplier credit records. The initiative addresses real procurement risks where identical models from different providers show up to twofold differences in throughput and reliability, according to a China Academy of Information and Communications Technology report. By combining model fingerprinting, capability testing, periodic audits, and continuous credit scoring, the platform seeks to create transparent market mechanisms similar to commodity exchanges. This development signals a broader industry shift from raw model capability competition toward standardized service quality, pricing transparency, and reliable delivery infrastructure.

Habr•Other

Windows and MacBook Pro Setup Combines Local Network Access with Dual VPNs and Kill Switch Protection

A user detailed how they integrated an older MacBook Pro into an existing Windows workstation environment while preserving separate user accounts, file sharing, and independent VPN connections. The setup required careful routing configuration to keep the Kill Switch active on both Amnezia VLESS and AmneziaWG without breaking local SMB connectivity. After initial failures caused by the Windows Kill Switch blocking the 192.168.1.0/24 subnet, split tunneling was implemented to route local traffic directly. Separate macOS accounts were created for daily use and a dedicated “Serverok” account for remote scripting and compute tasks. SSH and SFTP ultimately replaced problematic SMB shares for the secondary account, enabling reliable file transfers at over 50 MB/s. The configuration allows simultaneous or sequential use of both machines while maintaining strong VPN protection on each.