5 ms·
They say key exchange is by Diffie-Hellman, and authentication is by validating fingerprints. http://www.wireover.com/security/ http://www.wireover.com/securit
by eliteraspberrie 13y ago
They say key exchange is by Diffie-Hellman, and authentication is by validating fingerprints.
http://www.wireover.com/security/ http://www.wireover.com/security/
- ctz 13y ago"WireOver uses what we believe are the most appropriate, safe, up-to-date, peer-reviewed crypto primitives, implementations, and parameters [...] Fingerprint Algorithm: MD5" I fear this page was written with a straight face :(
- deleted 13y ago[deleted]
- tashmahalic 13y agoThere's a tradeoff between collision resistance and fingerprint string length. We chose MD5 because people are comfortable with it in ssh, it's a shorter string to verify than something like SHA-256, and because we planned to make your peer's entire public key base64 available if you really wanted to go that extra mile (currently not available). What would you prefer personally: (1) MD5 fingerprint for convenience AND entire peer public key base64 available if you really want; vs (2) just a longer SHA-256 fingerprint.
- pjscott 13y agoIf you just want a shorter string, I'd prefer truncated SHA-256.
- tptacek 13y agoYes, this is the correct way to get a shorter hash. Using MD5 is a terrible idea.
- tashmahalic 13y agoWe're changing it.
- tptacek 13y agoGood call.
- adam-f 13y agoI'm confused by their claim of hashing and THEN salting authentication codes. On the server-side, we don't store the authentication code in plaintext. We hash it with PBKDF2 / SHA-256, salt it, then store it.
- tashmahalic 13y agoIt's a salted hash. That page is corrected, thanks.
- diziet 13y agoNo PGP key or contact email on the security page?
- tashmahalic 13y agoThere's a PGP key on the contact page: wireover.com/contact
- DonGateley 13y agoI wish they'd explain this "fingerprint" system that secures Diffie-Hellman against the man in the middle. e.g. how are fingerprints exchanged? If you can exchange anything truly securely, you can exchange good old fashioned public keys. If you can't exchange something securely you can't stop MIM attack.
- tashmahalic 13y agoIt works like ssh. When you send or receive securely, you can see a fingerprint of your peer's public key, and a fingerprint of your own public key. Your peer sees these too. To mitigate MITM attacks, ask your peer for their public key fingerprint using something other than WireOver: phone, SMS, email, PGP email - whatever you're comfortable with. That's your "second factor of authentication". Your approval is cached so you only need to do it once. We'll better explain this on the website.