3 ms·
WhatsApp's security improved an awful lot back in November when it got end-to-end encryption. MTProto has... issues. It uses IGE (infinite garble extension, a
by talideon 12y ago
WhatsApp's security improved an awful lot back in November when it got end-to-end encryption.
MTProto has... issues. It uses IGE (infinite garble extension, a variation on the accumulated block chaining - ABC - mode of operation) as its mode of operation, which isn't exactly widely used or battle proven and is considered broken. Something like GCM wouldn've been a saner choice. Another issue is that it uses SHA1 for message authentication. Now, the issue isn't so much that they're using SHA1, but that they aren't using a MAC for message authentication.
It has other issues, but I have to rush off.