Re:Decrypting the Signal App
by Justsignedup on Monday December 14, 2020 @04:17PM
(#25423439)
So is the goal here to basically root the android / iphone, then grab the encryption key, then grab the decrypted signal app data, then grab the encryption key? I mean makes sense as a tool if they can automate that well.
> Yeah, if you have all the keys you can decrypt stuff..
I expect the intended audience for this article is digital forensics examiners, who might be employed by say law enforcement or corporate investigators. Not the average Hacker News crowd.
Signal has considered this by adding an additional client-side "encrypted my messages" locally. So I'm curious if this is what they are referring to.
Post-physical unlocked HD access to the device, aka digital forensics.
> Decrypting messages and attachments sent with Signal has been all but impossible…until now.
> We found that acquiring the key requires reading a value from the shared preferences file and decrypting it using a key called “AndroidSecretKey”, which is saved by an android feature called “Keystore”.
Yeah, if you have all the keys you can decrypt stuff..
This is dumb, pleas please do not upvote