Re:‘I will show you how safe Telegram is’
by m3kw9 on Thursday February 16, 2023 @10:50AM
(#34820239)
OTP one time pads are uncrackable if is random enough. Hard part is transporting that decoder to someone.
Re:‘I will show you how safe Telegram is’
by lxgr on Thursday February 16, 2023 @11:08AM
(#34820502)
Textbook one-time pads are trivially malleable. Sometimes non-malleability matters just as much or more than privacy.
("This is POTUS, do$ÿ} launch the nukes!!!")
Re:‘I will show you how safe Telegram is’
by brobdingnagians on Thursday February 16, 2023 @12:09PM
(#34821554)
If you are a developer working for the government and in charge of this, please do not make this mistake. If you are the President of the United States and need to send a message like this, please make it completely unambiguous. Maybe repeat it several times and provide a justification.
Re:‘I will show you how safe Telegram is’
by lxgr on Thursday February 16, 2023 @12:25PM
(#34821856)
I'm fairly confident that the US government, given that it runs the NSA, has access to a textbook or two on applied cryptography and cryptanalysis and does not need to source input on their cryptographic designs from HN :)
Re:‘I will show you how safe Telegram is’
by teucris on Thursday February 16, 2023 @11:50AM
(#34821222)
> That‘s actually pretty secure in practice, because you won‘t be communicating with anybody.
Nice. In all seriousness though, there has to be a way to make a hand-rolled but secure channel. E.g. use standard crypto libraries, hand-exchange keys or key phrases, etc?
Re:‘I will show you how safe Telegram is’
by shrimp_emoji on Thursday February 16, 2023 @12:10PM
(#34821578)
>How do you generate the keys? How do you share them?
https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exc...
That‘s actually pretty secure in practice, because you won‘t be communicating with anybody.
> Ideally just use one time keys and xor everything.
How do you generate the keys? How do you share them? And you only care about encryption, authentication does not matter to you at all?
The chance of getting this right as an individual developer, especially given this level of understanding of cryptography, is next to zero.