7 ms·
From what I can tell, the main difference between this and what Signal was using as of December is: - WhatsApp uses AES-256 instead of AES-128 (both are CBC mo
by CiPHPerCoder 11y ago
From what I can tell, the main difference between this and what Signal was using as of December is:
- WhatsApp uses AES-256 instead of AES-128 (both are CBC mode)
- WhatsApp uses HMAC-SHA-256 instead of HMAC-SHA-1
I think everything else is the same. (I need to re-read the Signal Protocol specification later today to make sure.)
- aorth 11y agoThe WhatsApp paper also mentions that they are using AES-GCM for message transit (Client A → WhatsApp server, I guess).
- moxie 11y agoThere is no difference, WhatsApp and Signal both use the Signal Protocol, and the same code: https://github.com/whispersystems/libsignal-protocol-java https://github.com/whispersystems/libsignal-protocol-java
- CiPHPerCoder 11y agoOh, excellent. (Last I checked it was still AES-128 and SHA-1, but that was before the name change and I wasn't sure if it had changed. Glad to hear it has.)