undefined | Better HN

0 pointshiimkeks2y ago0 comments

> The cloud and E2EE encryption of Telegram have already been audited by independent researchers.

Yes, and they all agree it's crap. Just look at this thread https://news.ycombinator.com/item?id=6915741 (Feel free to ignore Moxie, but listen to tptacek). In addition, it doesn't even matter since (a) it's not turned on by default and (b) it can't be turned on for group chats.

That said, I agree that Durov probably is not closely collaborating with the Russian state.

0 comments

NayamAmarshe2y ago

The thread you linked is talking about a totally different algorithm, not relevant to our discussion.

MTProto 1.0 had flaws and proven vulnerabilities. Telegram ditched the algorithm after 2013.

MTProto 2.0 is much secure and has been audited multiple times already without fail. The security is solid, that's the consensus.

Also, there are 2 types of MTProto 2.0 algorithms. One is cloud encryption and the other is end to end encryption.

Cloud encryption is enabled by default on all chats but for those who need end to end encryption, they can use secret chats.

You can read more about it here: https://core.telegram.org/techfaq#q-how-does-server-client-e...

hiimkeksOP2y ago

Apparently they didn't learn much, given that MTProto 2.0 still uses IGE. Or still derives the IV from a hash of the message.

The article you link does not mention "cloud encryption". What is that? TLS?

NayamAmarshe2y ago

The cloud encryption is what I linked, the Server-Client encryption. Just below it, you can see E2E.

1 more reply

j / k navigate · click thread line to collapse

0 pointshiimkeks2y ago0 comments

> The cloud and E2EE encryption of Telegram have already been audited by independent researchers.

That said, I agree that Durov probably is not closely collaborating with the Russian state.

0 comments

NayamAmarshe2y ago

The thread you linked is talking about a totally different algorithm, not relevant to our discussion.

MTProto 1.0 had flaws and proven vulnerabilities. Telegram ditched the algorithm after 2013.

MTProto 2.0 is much secure and has been audited multiple times already without fail. The security is solid, that's the consensus.

Also, there are 2 types of MTProto 2.0 algorithms. One is cloud encryption and the other is end to end encryption.

Cloud encryption is enabled by default on all chats but for those who need end to end encryption, they can use secret chats.

You can read more about it here: https://core.telegram.org/techfaq#q-how-does-server-client-e...

hiimkeksOP2y ago

Apparently they didn't learn much, given that MTProto 2.0 still uses IGE. Or still derives the IV from a hash of the message.

The article you link does not mention "cloud encryption". What is that? TLS?

NayamAmarshe2y ago

The cloud encryption is what I linked, the Server-Client encryption. Just below it, you can see E2E.

1 more reply

j / k navigate · click thread line to collapse