Join Nostr
2025-03-24 23:15:20 UTC
in reply to

ity [unit X-69] - VIOLENT FUCK on Nostr: Infodump follows aimed at nobody in particular: AES is the symmetric cipher, Signal ...

Infodump follows aimed at nobody in particular:

AES is the symmetric cipher, Signal uses ECC (on Curve25519 & derivatives: So X25519 and Ed25519) for the DR protocol, and ML-KEM as the KEM for the initial key exchange.

ECC is not quantum-safe: You can recover a private key from the public key and decrypt communication if you have a quantum computer. The protection from using a PQC (post-quantum) KEM for the initial key exchange is limited.

Additionally, Signal has a specific threat model, which can make using it insecure for a lot of usecases. For one, it is not *anonymous*. This means that it does not protect your *identity*, it only protects your *messages*. Aka it is fine for chatting with trusted parties, but dangerous for chatting with untrusted parties.