Twitter Feed
@winterdeaf ("Matteo") wrote:
Much broken crypto, one common thread: bespoke, ill-designed cryptographic protocols.
Matrix, Mega, Threema, Telegram: secure primitives are not enough in complex applications. The new mantra shall be "don't roll your own protocol".
with quote tweet:
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at http://breakingthe3ma.app; mini-thread follows. #threema