4 ms·

Outside Signal app, if e.g. I incorporate the protocol to my own app via the provided source code, am I prevented from leaking keys?

• tptacek 7y ago
  Exactly what is your point? Durov is talking about Signal, not some hypothetical application you came up with to leak keys.
  • bitL 7y ago
    Wasn't he talking about WhatsApp that integrates Signal protocol? Asking if integrating protocol allows the "host" app to leak keys is completely valid.
    • UncleMeat 7y ago
      Again, reading bytecode is not hard. Even reading decompiled binaries isn't very hard. If WhatsApp was leaking keys on the side it wouldn't be too difficult to find, especially given how incredibly high profile it is as a target. Open source vs closed source is not meaningful here.
      • bitL 7y ago
        Alright, I got what you meant. Do you know if anyone performed bytecode-level analysis on WhatsApp clients already? Just curious, it's nothing I really need.