3 ms·
AES256-IGE is a good choice since it disappeared from papers and suspected to be superior than other modes. Papers are literally disappeared in first month of
by ex3ndr 6y ago
AES256-IGE is a good choice since it disappeared from papers and suspected to be superior than other modes.
Papers are literally disappeared in first month of public Telegram release.
Source: Myself working at first months after public Telegram release on Android client.
- amluto 6y agoHow is disappearance from papers a good thing? I found a patent (!): https://patents.google.com/patent/US6973187B2/en https://patents.google.com/patent/US6973187B2/en It’s written in patent-ese, but it looks like a mediocre attempt at an efficient authenticated encryption scheme, and it doesn’t appear to use the building blocks of modern schemes. I can’t even find a coherent description of what the “non-cryptographic manipulation detection code” is or what properties are required. Meanwhile, the Telegram protocol is new. Surely it should use a standard AEAD with a security proof.