News for hackers. Stuff that matters.

A comment on Surespot app - free and open source encryption for everyone. Parent comment

Re:Surespot app - free and open source encryption for everyone by surespot on Monday September 02, 2013 @11:43AM (#6315642)
Perhaps you can get a second impression-

details of threat model- https://www.surespot.me/documents/threat.html

details of how surespot works including crypto- https://www.surespot.me/documents/how_surespot_works.html

you can always review the code on GitHub- https://github.com/surespot/android

[ Parent | on HN ]
Re:Surespot app - free and open source encryption for everyone by ig1 on Monday September 02, 2013 @12:00PM (#6315712)
You should have a look at:

https://www.owasp.org/index.php/Threat_Risk_Modeling

To understand the standard approaches to threat modelling.

It should be trivial for someone to look at the documentation and quickly answer basic security questions like "Does it defend against replay attacks ?" and "Does it leak message size ?"

[ Parent | on HN ]