3 ms·
Key exchange algorithm, symmetric cipher and mode of operation, is it forward secret, future secret, how are keys generated (CSPRNG algorithm), how are the ciph
by maqp 6y ago
Key exchange algorithm, symmetric cipher and mode of operation, is it forward secret, future secret, how are keys generated (CSPRNG algorithm), how are the ciphers tested (test vectors, links to test vector sources and to unittests doing test vectors), rationale for primitive choices. How are key changes handled, what kind of warning is displayed when public key changes, fingerprint encoding, cryptographic protocol descriptions, threat model (the more transparent the better), if blockchain is used to provide e.g. key authenticity.
"The Status client includes an Ethereum wallet because many people interested in the messaging technology are also interested in cryptocurrency."
So it's an encrypted messenger with a wallet, OK.
"Decentralized messaging tech aims at making 1-1 and group messaging more secure."
So you should discuss the monetary incentives for people to host a decentralized server, and also discuss how malicious state entities running servers is not economically viable, if that's the case, or tell that it's not the case. You should also discuss how it makes it more secure.
So tl;dr create an article for cryptographers/infosec folks that need to understand how the security works (and please remember most people in those circles are really allergic to marketing language and buzzwords unless it's a technical property).
- michaelsbradley 6y agoI think most of the information you're looking for is documented in the specs: https://github.com/status-im/specs/tree/master/docs https://github.com/status-im/specs/tree/master/docs https://github.com/vacp2p/specs/tree/master/specs https://github.com/vacp2p/specs/tree/master/specs Monetary incentivization for running a mailserver is being researched and (afaik) is not yet implemented or specified. There is a relevant discussion forum: https://forum.vac.dev/ https://forum.vac.dev/ Activity there is currently light because most core contributors' time, at present, is being spent on other pressing tasks. See also: https://discuss.status.im/ https://discuss.status.im/