News for hackers. Stuff that matters.
Re:Threema – Secure and Private Messenger by qqqqqqqqqqqqqqw on Thursday January 21, 2021 @10:08AM (#25859565)
> Does not use GCM.

Why is this a benefit?

Re:Threema – Secure and Private Messenger by xenocratus on Thursday January 21, 2021 @10:31AM (#25859871)
I had the same question until I realised it meant Google Cloud Messaging (or, this is how people seem to interpret it) - my initial thought was that it was about Galois Counter Mode (an authenticated encryption mode), and was curious why not using it was considered a benefit.

Threema does seem to use XSalsa20 + Poly1305 for authenticated encryption (not AES in GCM), btw.

Re:Threema – Secure and Private Messenger by anotherhue on Thursday January 21, 2021 @10:42AM (#25860009)
Haha, I'm sorry about that confusion, as a fellow crypto-fan I should have noticed.
Re:Threema – Secure and Private Messenger by anotherhue on Thursday January 21, 2021 @10:22AM (#25859743)
a) I feel Google is over-represented in our tech lives, so when it's possible to use an alternative I choose to.

b) GCM undoubtedly collects metadata about my usage of it

c) [falsified] AFAIK GCM requires a Google account, which means your usage of the system is at the pleasure of Google, and can be disabled for a myriad of Orwellian reasons.

Re:Threema – Secure and Private Messenger by chopin on Thursday January 21, 2021 @11:06AM (#25860329)
I use Signal on Android and I definitely have no Google account. It seems to be an optional component of Signal. As well I never was asked sign up anywhere.
Re:Threema – Secure and Private Messenger by qqqqqqqqqqqqqqw on Thursday January 21, 2021 @10:57AM (#25860201)
Thanks for explaining. Though, like xenocratus, I thought you meant Galois/Counter Mode and was similarly puzzled :)
Re:Threema – Secure and Private Messenger by lxgr on Thursday January 21, 2021 @11:12AM (#25860409)
> AFAIK GCM requires a Google account

It does not.