4 ms·
If they have $1M to invest, why don't they focus on securing their protocol (i.e. switching to authenticated encryption) and turning encryption on by default?
by CiPHPerCoder 11y ago
If they have $1M to invest, why don't they focus on securing their protocol (i.e. switching to authenticated encryption) and turning encryption on by default?
See http://cs.au.dk/~jakjak/master-thesis.pdf http://cs.au.dk/~jakjak/master-thesis.pdf for more on why Telegram isn't secure and you shouldn't trust it (as it is today) for anything requiring privacy.
- pdappollonio 11y agoI'm not up to date, but didn't Telegram had a bounty for someone who could read a conversation even by knowing the phone numbers involved? If so, why the writer here didn't got the bounty?
- fabulist 11y agoI don't know specifically, but perhaps this commentary will be enlightening. https://moxie.org/blog/telegram-crypto-challenge/ https://moxie.org/blog/telegram-crypto-challenge/ https://www.schneier.com/crypto-gram/archives/1998/1215.html#contests https://www.schneier.com/crypto-gram/archives/1998/1215.html...
- CiPHPerCoder 10y agohttp://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest http://www.cryptofails.com/post/70546720222/telegrams-crypta... Because their contest is a dumb gimmick that doesn't encompass chosen-ciphertext attacks.