3 ms·
Is the cryptography protocol documented anywhere? The link on your website under the end-to-end heading leads to the Privacy Policy, that only mentions "XChaCh
by FiloSottile 5y ago
Is the cryptography protocol documented anywhere?
The link on your website under the end-to-end heading leads to the Privacy Policy, that only mentions "XChaCha20-Poly1305-IETF & Argon2" which is far from enough details, especially for a closed source app with no audits.
From the names it sounds like you use libsodium, which is good, but it doesn't make rolling your own protocol safe.
- thecodrr 5y agoWe are a bit lacking on the documentation side currently. However, there is no new protocol. It says "XChaCha20-Poly1305-IETF & Argon2" because that's the core part. Everything else is standard. I'll write up a doc on how encryption + syncing works though. And I have full plans to open source the security related parts of the app.