I don't have a security or crypto background, but I saw an interesting bug story about Telegram, provocatively entitled "Cryptography Dispatches: The Most Backd

I don't have a security or crypto background, but I saw an interesting bug story about Telegram, provocatively entitled "Cryptography Dispatches: The Most Backdoor-Looking Bug I’ve Ever Seen." "Now, normally the two sides would compute the shared key as (g^a)^b mod p and (g^b)^a mod p. Instead, the original version of MTProto computed it as (g^a)^b mod p XOR nonce where nonce was an arbitrary, supposedly random value sent by the server along with the peer’s public contribution. This was a completely non-standard and useless addition, and all it did was let the server perform an undetected Person-in-the-Middle attack." https://buttondown.email/cryptography-dispatches/archive/cryptography-dispatches-the-most-backdoor-looking/ https://buttondown.email/cryptography-dispatches/archive/cry...