Public crypto audit report: lurch/OMEMO
![](https://secure.gravatar.com/avatar/58b5ca6d284ad539a47221806ef4a870.jpg?s=120&d=mm&r=g)
Dear Cypherpunks, We're glad to kill off some 0days for open source crypto implementations. Here's public crypto audit report: lurch/OMEMO https://hardenedvault.net/files/lurch-audit.pdf Cheers, regards R@HardenedVault
![](https://secure.gravatar.com/avatar/2733b1d1be8e6b2058e15ae9afb4d569.jpg?s=120&d=mm&r=g)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Wednesday, June 16th, 2021 at 11:16 PM, ROOT@HardenedVault <root@hardenedvault.net> wrote:
Dear Cypherpunks, We're glad to kill off some 0days for open source crypto implementations. Here's public crypto audit report: lurch/OMEMO
i'm sorry you have to work with pidgin! :P~ but seriously: XMPP is inherently flawed, even with OMEMO over it... best regards, -----BEGIN PGP SIGNATURE----- iNUEAREKAH0WIQRBwSuMMH1+IZiqV4FlqEfnwrk4DAUCYOYS918UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0NDFD MTJCOEMzMDdEN0UyMTk4QUE1NzgxNjVBODQ3RTdDMkI5MzgwQwAKCRBlqEfnwrk4 DDROAQCsMVWQl86LaDNyHgJsedZrB+sNx3MOYx2qzk2btqnsjQD9GaAUYoa/xg/z ZEMpyKr/tnxUF9N63ea2/4l2Tnh6GqI= =Wwzy -----END PGP SIGNATURE-----
![](https://secure.gravatar.com/avatar/282de779379df541755a7a1f9b83323a.jpg?s=120&d=mm&r=g)
On Wed, Jul 07, 2021 at 08:48:46PM +0000, coderman wrote:
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Wednesday, June 16th, 2021 at 11:16 PM, ROOT@HardenedVault <root@hardenedvault.net> wrote:
Dear Cypherpunks, We're glad to kill off some 0days for open source crypto implementations. Here's public crypto audit report: lurch/OMEMO
i'm sorry you have to work with pidgin! :P~
but seriously: XMPP is inherently flawed, even with OMEMO over it...
omemo is also kinda flawed: https://conversations.im/omemo/audit.pdf but then even signal is: https://eprint.iacr.org/2021/626
participants (3)
-
coderman
-
ROOT@HardenedVault
-
stef