Showing revision 2

2017-09-13 Idiotic Telegram Crypto Challenge

Difference between revision 1 and revision 2

Summary: note that it is old news

Added:

> This is old news, but I haven't updated this blog in a while. In any case, here's a good read:

Changed:

< Please check out the whole article , but here is a TL;DR anyway:

to

> Please check out the whole article, but here is a TL;DR anyway:


This is old news, but I haven't updated this blog in a while. In any case, here's a good read:

https://moxie.org/blog/telegram-crypto-challenge/

Please check out the whole article, but here is a TL;DR anyway:

“If Telegram wants to prove that their protocol is better than this absolute garbage protocol, then I challenge them to publish the plaintext of Alice’s message.”

“Here we have a messaging protocol that employs the NSA backdoored random number generator (Dual_EC_DRBG), weak public key cryptography (896bit RSA, no padding, no signatures, no authenticity), the worst cryptographic hash function possible as a KDF (MD2), and XOR as a cipher.”