News for hackers. Stuff that matters.
Re:WhatsApp Security Whitepaper [pdf] by dang on Tuesday April 05, 2016 @03:47PM (#11433734)
https://news.ycombinator.com/item?id=11431108
[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by CiPHPerCoder on Tuesday April 05, 2016 @02:02PM (#11432777)
From what I can tell, the main difference between this and what Signal was using as of December is:

- WhatsApp uses AES-256 instead of AES-128 (both are CBC mode)

- WhatsApp uses HMAC-SHA-256 instead of HMAC-SHA-1

I think everything else is the same. (I need to re-read the Signal Protocol specification later today to make sure.)

[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by moxie on Tuesday April 05, 2016 @03:43PM (#11433689)
There is no difference, WhatsApp and Signal both use the Signal Protocol, and the same code: https://github.com/whispersystems/libsignal-protocol-java
[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by CiPHPerCoder on Tuesday April 05, 2016 @04:27PM (#11434079)
Oh, excellent.

(Last I checked it was still AES-128 and SHA-1, but that was before the name change and I wasn't sure if it had changed. Glad to hear it has.)

[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by aorth on Tuesday April 05, 2016 @03:24PM (#11433544)
The WhatsApp paper also mentions that they are using AES-GCM for message transit (Client A → WhatsApp server, I guess).
[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by d33 on Tuesday April 05, 2016 @02:55PM (#11433282)
It's nice to see decent security turned into a product desired by the users! I wonder which big platform is going to adopt this next :)

Is there any open-source Linux desktop implementation?

[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by xlynx on Saturday April 09, 2016 @08:19PM (#11464118)
No but there's a desktop web front-end which relays through your smartphone. https://web.whatsapp.com
[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by nickik on Wednesday April 06, 2016 @10:44AM (#11439068)
Do they use pinning for the Transport Layer? Apple seems to do that in their newer versions. Or is their some reason why they should not?
[ Parent | on HN ]
Re:WhatsApp Security Whitepaper [pdf] by l1feh4ck on Tuesday April 05, 2016 @02:42PM (#11433160)
end-to-end encryption protocol haa?
[ Parent | on HN ]