News for hackers. Stuff that matters.

A comment on Signal WhatsApp Chats Import. Parent comment

Re:Signal WhatsApp Chats Import by JoshTriplett on Friday January 08, 2021 @05:44PM (#25691507)
> I fundamentally distrust any program which claims E2E encryption and is capable of recovering my chat history onto a new device.

I would expect a Signal implementation of this to allow recovering chat history if you restore a backup onto the new device and if you re-enter your PIN.

[ Parent | on HN ]
Re:Signal WhatsApp Chats Import by freeone3000 on Friday January 08, 2021 @08:25PM (#25694589)
Your pin is not your key, even through a KDF. That would allow guessing with only 10**4 guesses. Signal exports an unencrypted backup to a formatted text file, which can then be imported by another signal instance.
[ Parent | on HN ]
Re:Signal WhatsApp Chats Import by JoshTriplett on Saturday January 09, 2021 @12:26AM (#25697531)
I don't mean a network backup. I mean a device-to-device data transfer, for which the device passphrase and the Signal PIN together should be sufficient.

(Also, your Signal PIN can be an alphanumeric passphrase.)

[ Parent | on HN ]