Cryptography hides a message's meaning; steganography hides its existence. The first makes a locked box anyone can see; the second makes the box invisible. Its one advantage over a cipher: a secret that draws no attention is a secret no one tries to break. Here is its line of descent, its five ways into sound, and the reason it can carry your signature but never quite prove it.
cipher vs. cover — the distinction
cryptography
The message is visible but scrambled. The adversary knows a secret exists and attacks the lock.
hides MEANING · "you can't read it"
steganography
The message is plain but concealed inside an innocent carrier. The adversary never knows to look.
hides EXISTENCE · "you don't know it's there"
They compose: encipher first, then hide the ciphertext. Belt and invisibility. And both, done well, obey Kerckhoffs's principle — the method is assumed public; only the key is secret. A scheme that relies on no one knowing how it hides is just security through obscurity.
① the lineage
note. dates are the first records, not the first uses; concealment surely predates Herodotus. the 1499 date is the term's coinage, not the practice's birth.
② into sound — a working watermark (echo hiding)
Set 8 bits — call it your mark. The drum below hides them in noise as echoes too brief to hear: a short delay means 0, a longer delay means 1. Play the clean carrier and the marked one — they sound identical. Then detect: an autocorrelation finds the echo in each slice and reads your bits back out.
set your 8 bits, then hide & detect them
③ the five ways into audio
LSB codingOverwrite the quietest bit of each sample. Huge capacity, zero subtlety — and the most fragile: a single recompression wipes it.capacity ●●● · robustness ○○○
echo hidingAdd an echo shorter than the ear resolves; the delay carries the bit. What you just played — survives playback in air.capacity ●○○ · robustness ●●○
phase codingRewrite the absolute phase of a segment. The ear barely hears phase, so it's near-inaudible — but low-rate and fiddly to sync.capacity ●○○ · robustness ●●○
spread spectrumSmear the payload across the whole band below the noise floor, like DSSS radio. Hard to find, hard to remove, very low rate.capacity ●○○ · robustness ●●●
psychoacousticHide bits exactly where a codec's masking model says you can't hear — so the mark survives MP3, because it lives inside the compression.capacity ●●○ · robustness ●●○
④ the triangle you can't beat
the information-hiding bound. a fixed carrier holds only so much "perceptual slack." spend it on payload, on inaudibility, or on surviving attack — never all three at once. it's a rate–distortion problem wearing a cloak.
⑤ can it stitch attribution?
Watermarking is steganography pointed at provenance. A robust mark is built to survive copying and compression so ownership rides with the file; a fragile mark is built to shatter on any edit, so its absence proves tampering. But the honest bound: a watermark proves a mark is present, not that you made it. Under Kerckhoffs, anyone who knows the scheme can strip or forge it — it's a permanent arms race. The fix isn't more hiding; it's payload: make the embedded bits a cryptographic signature over the content hash, and anchor that hash externally. Then the mark says "signed by key X," verifiable, and the outside anchor says "and it existed at time T." The stego layer makes the claim travel with the copy; the crypto-anchor makes it unforgeable and dated. Carry both. Trust the anchor.
what's authentic. the lineage (Herodotus ~440 BC, Trithemius 1499, Simmons' 1983 prisoners' problem) and the five embedding methods are standard, textbook steganography. the echo-hiding demo above is real: it genuinely embeds 8 bits as echo delays in synthesized noise and recovers them by autocorrelation — verified, not faked.
honest frame. the demo hides in clean synthetic noise, the friendliest possible carrier; real audio and real attacks (recompression, resampling, desync, the StirMark family) are far harsher, which is exactly why robustness is the scarce corner of the triangle. nothing here is a substitute for a signed, externally-anchored hash.
PAPER I · STEGANOGRAPHY — the hidden channelnext ▸ II · ULTRASONIC — above hearing