3 ms·
Matrix also has an OTR-like multi-party encryption scheme based on the Axolotl ratchet called Olm[1]. It also went through an NCC security audit[2]. I believe i
by cyphar 9y ago
Matrix also has an OTR-like multi-party encryption scheme based on the Axolotl ratchet called Olm[1]. It also went through an NCC security audit[2]. I believe it has many of the same features as (n+1)sec, so I'm a little confused why they said
> Now that a first protocol for secure distributed multiparty chat exists
are they not aware of Olm, or do they not think it provides the same guarantees?
[1]: https://git.matrix.org/git/olm/about/ https://git.matrix.org/git/olm/about/
[2]: https://www.nccgroup.trust/us/our-research/matrix-olm-cryptographic-review/ https://www.nccgroup.trust/us/our-research/matrix-olm-crypto...
- wuch 9y ago(n+1)sec attempts to address the issue of transcript consistency, which is completely out of scope for megolm. Though, it puts additional requirements on the chart room, in particular "members of the chat room receive the same chat events in the same order". I wonder how well this works in practice; does XMPP chat rooms usually ensure this or not; what about flaky internet connection, etc.
- hvidgaard 9y agoThe protocol itself could implement an ITC, with deterministic rules for concurrent events, and thus have an identical ordering for all members. It would make sense to make this as an extra layer on top of the core protocol when using distribution mechanics that cannot guarantee ordering (which is most of them).