Re: Public crypto audit report: lurch/OMEMO

On Wed, Jul 07, 2021 at 08:48:46PM +0000, coderman wrote:

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Wednesday, June 16th, 2021 at 11:16 PM, ROOT@HardenedVault wrote:

...

Dear Cypherpunks, We're glad to kill off some 0days for open source crypto implementations. Here's public crypto audit report: lurch/OMEMO

https://hardenedvault.net/files/lurch-audit.pdf

i'm sorry you have to work with pidgin! :P~

but seriously: XMPP is inherently flawed, even with OMEMO over it...

omemo is also kinda flawed: https://conversations.im/omemo/audit.pdf but then even signal is: https://eprint.iacr.org/2021/626