3 ms·
> However the data is stored, first, in special storages called secure enclaves, which even Signal developers can’t access. And second, the numbers themselves a
by AtNightWeCode 4y ago
> However the data is stored, first, in special storages called secure enclaves, which even Signal developers can’t access. And second, the numbers themselves aren’t stored there in plain text, but rather in the form of a hash code.
I was out of context. You can use salt, pepper or both but if these attacks are done buy Signal developers it would most likely be easy to crack the hashes. In the case of a data leak it can help depending on how difficult it is to figure out how the hashing works.
- palata 4y agoWrong. That's exactly the point of the secure enclave.
- AtNightWeCode 4y agoExplain. It is generally not possible to use hashing securely on finite sets like phone numbers.
- palata 4y agoThe secure enclave guarantees cryptographically that you are running the code you say you are running. That code (private contact discovery) is open source and authenticated by your client using remote attestation. It's not just a hash, it's an SGX enclave.