3

Using, say, outguess, it is possible to hide a secret message inside a JPEG image (LSB method).

Is it possible to undo the steganographic process given the modified image to reconstruct the original one? I want to obtain the same bits of the original image.

m0bius
  • 33
  • 5

2 Answers2

1

Not under normal circumstances. They have been changed.

Your question does not state whether or not the message is known. Any information like that can assist in the detective work that would help make any progress along these lines.

There is another possibility of having more information: For instance, Playboy.com places digital watermarks inside their images. So given a raw watermark and the steganos message, it is theoretically possible to reconstruct what was changed.

Of course, visually it will not matter. That is the beauty of steganography. If there are billions of possible colors and your eyes can really only tell the difference between 50-100,000 of them, then using those low-order bits is visually undetectable.

Where it gets complicated is if you use Steganos to put a message inside an image that already had another, the first one gets lost.

SDsolar
  • 977
  • 1
  • 6
  • 25
  • Ok, in my case the message is known and I have the modified image. The possibility is only theoretical or also practical (does any reversing software exists)? – m0bius May 20 '17 at 07:13
  • 3
    @m0bius, generally you cannot undo an overwrite operation even if you know the data that is currently written. For instance say you write a sector on a drive. You can know the content of the new sector exactly and still you won't recover what was written before. – Andrea Lazzarotto May 21 '17 at 10:19
  • I agree with @Andrea. Even if you do have the original for verification, the kind of software you are describing would be impossible. However, erasing steganographic content like watermarks is pretty easy. Like wiping a file or disk, but leaving the image visually identical. (And remember, this can all be done with .mp3 files, too - or virtually any other sound file) – SDsolar May 21 '17 at 17:35
0

If you ask whether there is a scientific/engineering proven way/formula/algorithm to revert back to the original - then no, there is no such one (at least I am not aware of).

From practical standpoint, all de-stegano software today work first by trying to identify the patterns/signatures in the 'encrypted' file for known stegano software packages. if it succeeds, then it tries to reverse the changes back to original based on the known algorithm used by the known software. So if the file was processed by a custom software with a custom algorithm ( I can come with an algorithm to change say every 7th byte only, XORing every 3 bits, then change algorithm at exactly half the file size), it would not be reverted back.

Of course it does not mean it is so secure, just that there is no general algo/software to 'undo' changes done by any stegano-software. The statistical/manual process can still be applied comparing the file with a file standard looking for anomalies, then reiterating the process until the original is found to some degree of certainty.

Yuri
  • 117
  • 3