Re:Once Celebrated in Russia, Programmer Pavel Durov Chooses...
by higherpurpose on Tuesday December 02, 2014 @10:47AM
(#8687655)
Will Telegram finally have end-to-end encryption by default for all users, just like TextSecure, and now even Whatsapp? I fail to see how an app can claim to be "the most secure in the world", when 99 percent of its users don't even use end-to-end encryption.
From the link, this paragraph was cringe-worthy:
> We use SHA1 for integrity check
The SHA1 in question is for raw unencrypted data.
The message key is SHA1-dependent.
Note that the AES key and iv depend on that SHA1.
Glad to see they're using this super-secure "SHA1" hash function for integrity checking and that everything else is dependent on it. In a few years they could even brag about how they're using SHA1 for longer than Microsoft!
From the link, this paragraph was cringe-worthy:
> We use SHA1 for integrity check The SHA1 in question is for raw unencrypted data. The message key is SHA1-dependent. Note that the AES key and iv depend on that SHA1.
Glad to see they're using this super-secure "SHA1" hash function for integrity checking and that everything else is dependent on it. In a few years they could even brag about how they're using SHA1 for longer than Microsoft!