News for hackers. Stuff that matters.
Re:Reddit DMs will not reach their destination if they conta... by aurorabbit on Sunday June 10, 2018 @02:34AM (#17276898)
I began work on a project for exactly this 2 months ago.

https://aurorabbit.github.io/emojicrypt.com/

It encrypts messages with a passphrase using scrypt, AES-GCM, and sha256 for an HMAC.

Each v1 protocol message includes a salt/iv, scrypt N&r, HMAC, and whether or not to lower-case the password. All messages encrypted with the proof-of-concept will be decrypt-able by all future clients, as there's room for 13 more protocol versions.

The code is in complete disarray, and I wouldn't want anyone to sift through it in it's current state[1], but the proof-of-concept is finished, and life came up, so it's been sitting since.

I have a list of features[2] I want to add in the issues tracker :)

[1] if you do want to sift through it don't miss https://github.com/aurorabbit/libemojicrypt. I separated the repos without following through on that reorganization.

[2] https://github.com/aurorabbit/emojicrypt.com/issues

Re:Reddit DMs will not reach their destination if they conta... by netheril96 on Sunday June 10, 2018 @05:08AM (#17277271)
What's the point of HMAC when you already authenticate with GCM?
Re:Reddit DMs will not reach their destination if they conta... by scient on Sunday June 10, 2018 @09:41AM (#17278060)
More buzzwords.