Signal adds a payments feature with a privacy-focused cryptocurrency

Re:Signal adds a payments feature with a privacy-focused cry... by AfouToPatisa on Tuesday April 06, 2021 @04:50PM (#26717227)

Even if an SGX attack does take place, tx's aren't recognized as the system is secured with Cryptonote's ring signatures (1st reply in FAQ https://github.com/mobilecoinfoundation/mobilecoin)

here too about 11mins in - https://www.youtube.com/watch?v=e9afDQ_M5CU

[ Parent | on HN ]

Re:Signal adds a payments feature with a privacy-focused cry... by codethief on Tuesday April 06, 2021 @05:18PM (#26717516)

The problem is: Signal already relies on SGX for lots of other features (Signal PINs & Secure Value Recovery, contact discovery etc. etc.) and these depend on SGX working as advertized.

[ Parent | on HN ]

Re:Signal adds a payments feature with a privacy-focused cry... by AlexCoventry on Wednesday April 07, 2021 @01:02AM (#26720777)

I wasn't aware that Signal relies on SGX. If I want to use Signal without being exposed to risk of SGX compromise, is it still possible?

[ Parent | on HN ]

Re:Signal adds a payments feature with a privacy-focused cry... by codethief on Wednesday April 07, 2021 @04:21AM (#26721810)

For contact discovery, AFAIK no[0].

For everything else: Yes, by setting a randomized long Signal PIN since SGX is effectively used to add entropy to Signal PINs[1]. You can also disable Signal PINs – in this case Signal will simply set a randomized long PIN for you.

[0]: https://signal.org/blog/private-contact-discovery/

[1]: https://signal.org/blog/secure-value-recovery/

[ Parent | on HN ]

Re:Signal adds a payments feature with a privacy-focused cry... by AlexCoventry on Wednesday April 07, 2021 @10:47AM (#26725713)

Thanks!

[ Parent | on HN ]