4 ms·
if the client encryption is reliable It's not[1]. [1]: https://eprint.iacr.org/2015/1177.pdf https://eprint.iacr.org/2015/1177.pdf
by pfg 11y ago
if the client encryption is reliable
It's not[1].
[1]: https://eprint.iacr.org/2015/1177.pdf https://eprint.iacr.org/2015/1177.pdf
- janinge 11y agoIt is not, or was not? Did this issue get rectified by Telegram?
- CiPHPerCoder 11y agoNo, they still use MTProto and not an AEAD construction.
- janinge 11y agoI was referring to the padding attack. Did they patch this? And are there any property of MTProto that makes it infeasible to replace AES IGE in a later revision of the protocol?
- CiPHPerCoder 11y agoThe problem isn't IGE. It's that they're using SHA1 (not HMAC-SHA1) in a "MAC and Encrypt" construction.