News for hackers. Stuff that matters.

A comment on Cryptocat Considered Harmful: The Root Cause. Parent comment

Re:Cryptocat Considered Harmful: The Root Cause by wtbob on Tuesday December 31, 2013 @01:41PM (#6992065)
> > They are already effectively communicating in plaintext

> Got anything to back up this statement, or is this what you're inferring from the post and the analysis of the group chat component a while back?

That flaw meant that key-guessing was easy, and with an easily-guessed key even the best-encrypted data becomes plaintext.

Given the numerous flaws so far found in Cryptocat and the quality of its code, I wouldn't trust my treasure, freedom or life to it.

[ Parent | on HN ]
Re:Cryptocat Considered Harmful: The Root Cause by thirsteh on Tuesday December 31, 2013 @03:34PM (#6992691)
Indeed, the PRG was flawed, but IIUC, this applied to only the RSA key generation used for group chat, not OTR, which is what cryptocat is mainly used for.

People reference "numerous flaws" a lot, but it all seems to lead back to the criticism of group chat from a while back. I'm not saying you're wrong--just be careful of the echo chamber.

[ Parent | on HN ]