News for hackers. Stuff that matters.

A comment on MEGA: Malleable Encryption Goes Awry. Parent comment

Re:MEGA: Malleable Encryption Goes Awry by tptacek on Wednesday June 22, 2022 @11:55PM (#31845012)
Right, I get that, but you could have done the two config things I just mentioned with OpenSSL.

I get why you didn't use OpenSSL. The normal thing for someone like you to do in 2022 would be to use Noise.

[ Parent | on HN ]
Re:MEGA: Malleable Encryption Goes Awry by alipitch on Thursday June 23, 2022 @01:39AM (#31845521)
What are real world implementations of the Noise Protocol? https://github.com/noiseprotocol/noise_spec/blob/v34/noise.m...

Quick search shows WireGuard protocol, but I am not sure if how much of the WireGuard protocol is the same as the Noise Protocol.

https://www.wireguard.com/formal-verification/ https://www.wireguard.com/papers/wireguard-formal-verificati...

  The WireGuard protocol is extensively detailed in [2], which itself is based on the NoiseIK [3] handshake.
[ Parent | on HN ]
Re:MEGA: Malleable Encryption Goes Awry by alipitch on Thursday June 23, 2022 @01:43AM (#31845556)
I found a page by Duo Labs listing Noise in Production.

https://duo.com/labs/tech-notes/noise-protocol-framework-int...

  Noise is used today in several high-profile projects:
    WhatsApp uses the "Noise Pipes" construction from the specification to perform encryption of client-server communications
    WireGuard, a modern VPN, uses the Noise IK pattern to establish encrypted channels between clients
    Slack's Nebula project, an overlay networking tool, uses Noise
    The Lightning Network uses Noise
    I2P uses Noise
[ Parent | on HN ]
Re:MEGA: Malleable Encryption Goes Awry by tptacek on Thursday June 23, 2022 @10:05AM (#31849298)
There's a bunch of them, but part of the point of Noise is to be extremely prescriptive in order to simplify implementation. WireGuard is based on Noise, but has a lot more than just Noise in it.
[ Parent | on HN ]