Advanced cryptographic ratcheting
12y ago
Source
SignalAdvanced cryptographic ratchetingsignal.orgAt Open Whisper Systems, we’ve been working on improving our encrypted asynchronous chat protocol for TextSecure. The TextSecure protocol was originally a derivative of OTR , with minor changes to accommodate it for transports with constraints like SMS or Push. Some of the recent changes we’ve made include simplifying and improving OTR’s deniability , as well as creating a key exchange mechanism for asynchronous transports . Our most recent change incorporates what we believe to be substantial improvements to OTR’s forward secrecy “ratchet.” Read more...
You might also wanna read
ChatGPT File Download Vulnerability: Guardrail Bypass to Local File Inclusion — Technical Analysis and Mitigations
Security researcher zer0dac discovered a vulnerability chain in OpenAI's ChatGPT platform that combines LLM social engineering (guardrail by
undercodetesting.com·1d agoMatrix.org
EU Advances Chat Control Proposal Despite Privacy Experts Warning of Encryption Backdoor
The EU is advancing a revised version of its Child Sexual Abuse Regulation (CSAR), commonly known as 'Chat Control,' which would require mes
A bit more on Twitter/X's new encrypted messaging
blog.cryptographyengineering.com·1y ago
Whispering: An Open-Source, Local-First Transcription App for Privacy-Conscious Users
Whispering is an open-source, local-first transcription app that prioritizes privacy by keeping audio data on-device. It supports both local
Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts
The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

Comments
Sign in to join the conversation.
No comments yet. Be the first.