Public crypto audit report: lurch/OMEMO

[stef]

On Wed, Jul 07, 2021 at 08:48:46PM +0000, coderman wrote:
> 
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> 
> On Wednesday, June 16th, 2021 at 11:16 PM, ROOT at HardenedVault <root at hardenedvault.net> wrote:
> 
> > Dear Cypherpunks,
> > We're glad to kill off some 0days for open source crypto implementations.
> > Here's public crypto audit report: lurch/OMEMO
> >
> > https://hardenedvault.net/files/lurch-audit.pdf
> 
> 
> i'm sorry you have to work with pidgin! :P~
> 
> but seriously: XMPP is inherently flawed, even with OMEMO over it...

omemo is also kinda flawed: https://conversations.im/omemo/audit.pdf
but then even signal is: https://eprint.iacr.org/2021/626