3 ms·
Why does Telegram provide the generator (g and p) and then suggest validation and caching? These can be hardcoded parameters
by nly 13y ago
Why does Telegram provide the generator (g and p) and then suggest validation and caching? These can be hardcoded parameters
- xytop 13y agoin cryptography nothing is hardcoded (or at least hardcoded values should have enough entropy) :) if client doesnt use caching - then every message user sends should obtain a new pair of p/g (which is expensive) - and it will make telegram not only insecure but also "slow" messenger :P
- nly 13y agoThe only things that aren't hardcoded in your typical secure cryptosystem is your key and a few nonces. In ECC the analogous components to p and g are defined extremely carefully and certainly wouldn't be changed willy nilly. I'm aware classic DH parameters are more liberal, but changing them for every session seems unnecessary.