Telegram protocol defeated. Authors are going to modify crypto-algorithm

Re:Telegram protocol defeated. Authors are going to modify c... by notastartup on Saturday December 21, 2013 @08:18PM (#6948880)

I hope this person will get the full $200,000. I definitely don't think we can ever trust Telegram's strength again. They won't be paying him the full $200,000 even though he has rendered the Telegram to be weak. Major, major backfire for Telegram stakeholders.

[ Parent | on HN ]

Re:Telegram protocol defeated. Authors are going to modify c... by lososerg on Sunday December 22, 2013 @05:47AM (#6949968)

They gave him $100 000. And yet the flaw he pointed out doesn't help you read encrypted messages and has been already fixed/

[ Parent | on HN ]

Re:Telegram protocol defeated. Authors are going to modify c... by makomk on Sunday December 22, 2013 @06:41AM (#6950041)

The flaw he pointed out renders one of the main advertised features of Telegram - end-to-end encrypted chats that they can't eavesdrop on - broken to the point of total worthlessness. Telegram had the ability to undetectably MITM and spy on the supposedly secure communications, as did anyone who managed to compromise them.

They'd have achieved exactly the same level of security by having no end-to-end encryption whatsoever and just promising that they wouldn't log or look at people's messages - this flaw is seriously that bad.

[ Parent | on HN ]