3 ms·
Doesn't TextSecure use some non-conventional cryptographic constructs, too? It's just that I heard some concerns about key exchange (that triple Diffie-Hellman
by drdaeman 12y ago
Doesn't TextSecure use some non-conventional cryptographic constructs, too?
It's just that I heard some concerns about key exchange (that triple Diffie-Hellman exchange) not having a formal security proof, although I'm completely incompetent to evaluate whenever those were valid concerns or just some chatter.
- tptacek 12y agoAre you comparing the Axolotl key ratchet Trevor Perrin designed to the 1980s throwback block cipher mode Telegram uses?
- drdaeman 12y agoYes and no. I have no idea whenever and how broken IGE is. I heard, nobody even cared to evaluate that. Boils down to "no formal proofs (but likely to be broken)". At the same time, I heard the concern there are no security proofs on the key exchange and it may have issues. Since as a commoner I can't evaluate it any further than this, so boils down to "no formal proofs (although hoped to be fine)", too. Those are surely different cases. I'm just concerned over what I use (TextSecure), though.
- tptacek 12y agoIf it makes you feel any better, after the paper published last week, it looks like TextSecure is the closest of all the messaging applications to any kind of formal proof.