AriaVenona: One-Time-Pad Operational Doctrine for Passive-Receive Channels

The one-time pad is the only cipher proven to offer perfect secrecy, yet the operational systems built on it continue to fail. This paper argues that those failures are never failures of the cipher and always failures of pad discipline, and that this fact has a sharp practical consequence: in a passive-receive channel built on a one-time pad, one hundred percent of the system's security budget belongs to pad logistics, and none of it belongs to the channel. We ground this claim in the VENONA case, in which Western cryptanalysts broke portions of Soviet one-time-pad traffic across roughly four decades — not by defeating the pad, but by exploiting pad pages that were duplicated and reused under wartime production pressure. We restate Shannon's perfect-secrecy preconditions as a set of operational rules, name the resulting doctrine the AriaVenona Rule, and argue that a passive-receive channel (a broadcast the receiver never answers) adds traffic-analysis resistance on top of cryptographic secrecy because there is no transmitter to locate. The contribution is not a new cipher or a new theorem; it is the codification, naming, and channel-specific application of an operational discipline whose violation has historically been the sole point of failure. We close by locating the real research frontier where it belongs: not in hardening an already-unbreakable channel, but in the unglamorous logistics of pad creation, distribution, lifecycle, and graceful silence on exhaustion.