3 ms·

I keep seeing this accusation get flung around whenever someone mentions telegram but never proof. I remember telegram had a vulnerability once and then it was

I keep seeing this accusation get flung around whenever someone mentions telegram but never proof. I remember telegram had a vulnerability once and then it was patched just like any other security software. You shouldn't throw around accusations without proof.

CiPHPerCoder 10y ago
Here's your proof: http://cs.au.dk/~jakjak/master-thesis.pdf http://cs.au.dk/~jakjak/master-thesis.pdf See also: http://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest http://www.cryptofails.com/post/70546720222/telegrams-crypta... https://moxie.org/blog/telegram-crypto-challenge/ https://moxie.org/blog/telegram-crypto-challenge/
- goodplay 10y ago
  Is it cryptographicly broken or not? Can I read the plain text of the traffic I capture?
  - CiPHPerCoder 10y ago
    https://tonyarcieri.com/all-the-crypto-code-youve-ever-written-is-probably-broken https://tonyarcieri.com/all-the-crypto-code-youve-ever-writt... The word "broken" means susceptible to practical attack, and attacks aren't always of the "cryptanalyze the ciphertext and read the plaintext because you're a clever mathematician" variety. For example: Padding Oracle Attacks. This is the most accessible explanation on-hand: https://twitter.com/SoatokDhole/status/720435675401744385 https://twitter.com/SoatokDhole/status/720435675401744385 A padding oracle attack lets you decrypt a message by studying how the cryptosystem responds to garbage input. Without recovering the key. iMessage had a compression oracle attack recently: http://blog.cryptographyengineering.com/2016/03/attack-of-week-apple-imessage.html http://blog.cryptographyengineering.com/2016/03/attack-of-we... They didn't merely "read the plain text of the traffic [they] capture[d]". But these systems were still, quite badly, broken. So what's my point? Telegram's protocol is susceptible to the same class of active attack. Thus, it is broken.
    - ianmiers 10y ago
      To add, Telegram's crypto is completely and totally off the walls crazy in terms of design. Add to that the fact that there are cryptographic breaks (though not we can read your ciphertext breaks), and you should be careful. iMessage would have been reasonably secure had they used AEC-GCM or a MAC. The design at least made sense: compose a scheme out of known primitives. They just missed (very important) details. Telegram is just turtles all the way down.

CiPHPerCoder 10y ago

Here's your proof: http://cs.au.dk/~jakjak/master-thesis.pdf http://cs.au.dk/~jakjak/master-thesis.pdf See also: http://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest http://www.cryptofails.com/post/70546720222/telegrams-crypta... https://moxie.org/blog/telegram-crypto-challenge/ https://moxie.org/blog/telegram-crypto-challenge/

goodplay 10y ago
Is it cryptographicly broken or not? Can I read the plain text of the traffic I capture?
- CiPHPerCoder 10y ago
  https://tonyarcieri.com/all-the-crypto-code-youve-ever-written-is-probably-broken https://tonyarcieri.com/all-the-crypto-code-youve-ever-writt... The word "broken" means susceptible to practical attack, and attacks aren't always of the "cryptanalyze the ciphertext and read the plaintext because you're a clever mathematician" variety. For example: Padding Oracle Attacks. This is the most accessible explanation on-hand: https://twitter.com/SoatokDhole/status/720435675401744385 https://twitter.com/SoatokDhole/status/720435675401744385 A padding oracle attack lets you decrypt a message by studying how the cryptosystem responds to garbage input. Without recovering the key. iMessage had a compression oracle attack recently: http://blog.cryptographyengineering.com/2016/03/attack-of-week-apple-imessage.html http://blog.cryptographyengineering.com/2016/03/attack-of-we... They didn't merely "read the plain text of the traffic [they] capture[d]". But these systems were still, quite badly, broken. So what's my point? Telegram's protocol is susceptible to the same class of active attack. Thus, it is broken.
  - ianmiers 10y ago
    To add, Telegram's crypto is completely and totally off the walls crazy in terms of design. Add to that the fact that there are cryptographic breaks (though not we can read your ciphertext breaks), and you should be careful. iMessage would have been reasonably secure had they used AEC-GCM or a MAC. The design at least made sense: compose a scheme out of known primitives. They just missed (very important) details. Telegram is just turtles all the way down.