Standard primitives, perhaps, but has the scheme itself been reviewed by competent cryptographers? At best, the Telegram developers are well meaning but have d

Standard primitives, perhaps, but has the scheme itself been reviewed by competent cryptographers? At best, the Telegram developers are well meaning but have demonstrated in previous versions of MTProto that they lack a background in cryptography or a desire to consult experts. And their public face—posts like this one—seem often to be hyperbolic attacks on competitors, which is not a great look. I’m not a cryptographer, so I’m not going to review the current MTProto. I hope it’s awesome and bug-free. But some skepticism seems warranted.