DNA Origami Turns Secrets into Molecular Morse Code: Multi-Key Nano-Safe Resists Single-Party Attacks
Mathematics has protected banking operations, government communications, and personal correspondence for decades. Modern cryptography converts plain text into unreadable data without the correct key. However, growing computational power and the rise of quantum computers are driving the search for new methods of storing secrets. Chinese researchers have now proposed using DNA for this task.
Scientists created a multi-level encryption system based on DNA origami. Molecules assemble into tiny rectangular plates where the message is written using dots and dashes in Morse code. After encoding, the flat structure folds into a tube that physically hides the pattern. The data can only be read with the correct molecular key that unfolds the tube.
DNA has long attracted information-storage specialists. The molecule can hold enormous volumes of data, and its base sequence can be programmed with high precision. In biomolecular cryptography, protection relies not on conventional computer algorithms but on the properties of DNA, proteins, bacteria, and their reactions.
The researchers chose DNA origami for the new system. This method folds a long single-stranded molecule into a desired shape using hundreds of short helper strands called staple strands. Each staple binds to a specific region of the main molecule and forces it to bend at the right location.
The device is built from flat DNA rectangles. Researchers placed elements representing dots and dashes on their surfaces. Dots were created from small DNA loops resembling dumbbells. Dashes were formed through a chain hybridization reaction in which short molecules sequentially connect to create a long double-stranded track.
The arrangement of dots and dashes encoded letters according to a pre-defined table. After writing the message, scientists attached special locking strands to the edges of the rectangle. Complementary sections found each other, joined, and pulled the plate into a tube.
Once folded, the pattern was hidden inside the structure. A scanning instrument could no longer detect the positions of dots and dashes, so the contents remained concealed even with physical access to the sample.
All messages were divided into blocks of equal size. This ensured that the length and shape of the DNA construct did not reveal the number of characters or the structure of the original text. An observer saw identical tubes regardless of the data inside.
Decryption required a verification key, denoted Vk, consisting of six types of unlocking DNA strands. Their sequences matched the locking regions exactly and bound more strongly than the tube edges bound to each other.
Adding the key caused the locking connections to break apart and the tubular structure to unfold back into a flat rectangle. Reaction efficiency reached 99.7 percent. Folding took about eight hours, while the reverse process completed in several minutes.
The unfolded surface was examined using atomic force microscopy. The method does not use ordinary light; a thin probe scans the sample and records minute height changes, allowing the instrument to build images of objects only a few nanometers in size.
The resulting image clearly showed the dots and dashes. Researchers compared the pattern with the code table and reconstructed the original message. The full cycle was tested on the phrase “JUNE6 INVASION NORMANDY”.
Transitioning between flat and tubular forms provides 2,576 possible key variants. Without the correct set of unlocking strands, the structure does not unfold and the internal pattern remains inaccessible to scanning.
Protection operates on multiple levels. First, content is converted into a sequence of dots and dashes. The elements are then recorded on a DNA nanostructure. The surface folds to hide the pattern physically. Recovering the message requires both the correct molecular key and equipment capable of resolving the pattern on the unfolded plate.
The entire encryption and decryption process took approximately ten hours. Electronic systems perform similar operations far faster, so DNA origami is not yet suitable for everyday correspondence or real-time data transmission.
The main value of the experiment lies not in speed. The scientists demonstrated that DNA molecules can be programmed to perform several cryptographic operations: recording a message, changing the carrier’s shape, concealing data, and revealing it only after the correct key is added.
The DNA system remains a laboratory prototype requiring sophisticated equipment and lengthy chemical reactions. Nevertheless, the work shows that future information-protection tools may rely not only on mathematical algorithms but also on the physical properties of programmable molecules.
Related articles
Hashcat Password Cracking: Why Complex Passwords Like Summer2026! Often Fail First
Password cracking tools such as hashcat and John the Ripper exploit predictable human patterns when generating candidates, allowing structured passwords to be recovered faster than truly random strings. The process relies on comparing computed hashes against stored values without needing to reverse the one-way function. Modern password storage uses salted, computationally expensive algorithms including bcrypt, Argon2id, sha512crypt and yescrypt to increase the cost of each guess. Different formats require specific hashcat modes, and parameters such as cost factors or memory settings directly affect cracking speed. WordPress 6.8 introduced bcrypt with SHA-384 preprocessing while older phpass records remain supported. Audits must preserve full hash records, verify modes on test data, and combine dictionaries, rules, masks and statistical models to measure real risk. After testing, organizations should migrate to properly tuned Argon2id and enforce long unique passphrases managed by password managers.
Why HTTP to HTTPS Redirects Fall Short: Risks of Exposed Requests and the Role of HSTS Preload
A simple HTTP to HTTPS redirect satisfies basic audit requirements but leaves the initial request fully exposed in plaintext. The request carries the full path, query parameters, and cookies lacking the Secure flag, allowing observers on open Wi-Fi or compromised routers to read or tamper with traffic before TLS begins. Modern browsers such as Chrome since version 90 attempt HTTPS first, yet legacy clients, explicit http:// links in emails, scripts, and failed HTTPS fallbacks continue to send unprotected requests. HSTS instructs browsers to use HTTPS after the first successful visit, yet the header itself travels over HTTPS and cannot protect the very first connection from a new device or cleared cache. Preloading embeds the rule directly in the browser, eliminating the initial plaintext request entirely, but demands includeSubDomains and a one-year max-age, making the change effectively irreversible for months. The article recommends verifying Secure flags on all cookies, ensuring single-step redirects to the same host, and testing HSTS incrementally before considering preload.
OSINT for the Lazy Part 18: Extracting Value from Wayback Machine Archives for Bug Bounty and Security Research
The article explores passive reconnaissance techniques using web archive tools to uncover forgotten endpoints, configuration files, and sensitive parameters without directly interacting with target systems. It highlights three command-line utilities—waybackurls, gau, and waymore—that query public archives such as Wayback Machine, Common Crawl, AlienVault OTX, and URLScan to retrieve historical URLs. These tools help bug bounty hunters and penetration testers discover old API endpoints, admin panels, backup files, and JavaScript with hardcoded secrets that may still be exploitable. Installation instructions, usage examples, and filtering options are provided for each tool to maximize efficiency and reduce noise in results. The piece emphasizes that all methods remain fully passive, minimizing detection risk while requiring proper authorization before any active testing. Advanced users are advised to combine the tools for broader coverage and deeper analysis of archived responses.
OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production
An in-depth OSINT probe into a Russian agricultural investment project promising 50-70% annual returns from garlic farming has revealed a likely import arbitrage operation sourcing produce from China and Uzbekistan. The project claimed ownership of over 300 hectares of fields, a proprietary seed fund, and guaranteed sales to major retailers including Magnit, Perekrestok, Pyaterochka, and Svetofor, yet public records show minimal profitability and heavy debt. Financial statements from linked cooperatives indicated just 2.2% net margin alongside loans exceeding annual revenue fourfold, pointing to reliance on continuous new investor capital. Registry checks confirmed no financial licenses, no seed-breeding status, and actual cultivated land far below advertised figures. Import declarations and equipment registrations further indicated the operation functions as a repackaging hub for foreign garlic sold under private labels. The parent group has been placed on the Bank of Russia blacklist, with related sites blocked by Roskomnadzor while Telegram channels continue aggressive marketing.