3 ms·
Putting this out there. But I’ve audited a number of implementations of Signal and of close similar protocols proposed by some of the big players. Found a bug t
by baby 3y ago
Putting this out there. But I’ve audited a number of implementations of Signal and of close similar protocols proposed by some of the big players. Found a bug that broke Matrix e2e encryption[1]. Wrote the chapter on e2e encryption in the real world cryptography book including the only explanation of Signal in a book[2].
All I’m saying is that twitter, if you’re reading this, know that I have the blue checkmark ;) and that I’m available for pentesting your e2e encryption implementation!
[1]: https://matrix.org/hall-of-fame https://matrix.org/hall-of-fame
[2]: https://www.manning.com/books/real-world-cryptography https://www.manning.com/books/real-world-cryptography
- tptacek 3y agoHey, David! Given the details we know right now about the implementation --- a single P-curve static-ephemeral key exchange for a long-lived GCM key --- would you sign off on that design? Is that how you'd implement encrypted messaging on a platform like Twitter? I mean, let's agree in advance that you might not do Signal Protocol given the expectations users would have. But is that how you'd do it?
- baby 3y agoHey I’m not doing this for free! Hehe