3 ms·
>Signatures only appear in the Signal protocol for prekeys... Correct me if I am wrong (Signal protocol is pretty complicated), but doesn't the triple DH take
by upofadown 5y ago
>Signatures only appear in the Signal protocol for prekeys...
Correct me if I am wrong (Signal protocol is pretty complicated), but doesn't the triple DH take a long term identity factor as an input? So in a sense the signature is built in. The result is logically the same as signing a DH exchange.
- supermatt 5y agothe prekeys are to establish the ratchet, which is distinct from the identity. They are signed by the identity so that they can be verified.
- upofadown 5y agoNo, not the prekeys. I meant the triple DH itself. I think my comment/question might of been confused. It appears that in practice Signal only uses prekeys to start things off. The prekeys are just signed chunks of the triple DH just stored somewhere for a time. So from that I conclude that Signal does in fact use signatures just like any other public key messaging system. The issue is fundamental after all...
- supermatt 5y agoYep, sigs are fundamental part of X3DH.