‘I will show you how safe Telegram is’

Re:‘I will show you how safe Telegram is’ by wkat4242 on Thursday February 16, 2023 @01:25PM (#34823150)

There's too many practical drawbacks. For example you have to send the OTP without getting it intercepted. How do you do that? It also has to be truly random. You can't pick a page from a book or anything, that undermines the whole model and makes cryptanalysis possible.

It's useful but only in very specific cases. Mostly it's just a paradigm in cryptography.

Note that for all its fame as unbreakable it does lack perfect forward secrecy so anyone getting a hold of it from any of the participants can read their intercepts from all the way back.

[ Parent | on HN ]

Re:‘I will show you how safe Telegram is’ by lostmsu on Thursday February 23, 2023 @12:08PM (#34913241)

Sitting in a cafe almost an entire week later: oh, but it does have perfect forward secrecy, as long as you discard the beginning of the pad as soon as you use it (which is actually strictly better than passing a temporary key over a potentially decryptable channel, and then discarding it after session ends). If I correctly understand what perfect forward secrecy is.

[ Parent | on HN ]