New breaks of Telegram's crypto found

BoerenkoolMetWorst · Jul 18, 2021

We performed a detailed security analysis of the encryption offered by the popular Telegram messaging platform. As a result of our analysis, we found several cryptographic weaknesses in the protocol, from technically trivial and easy to exploit to more advanced and of theoretical interest.
Click to expand...

https://mtpsym.github.io/

Interesting part:

We were informed by the Telegram developers that they do not do security or bugfix releases except for immediate post-release crash fixes. The development team also informed us that they did not wish to issue security advisories at the time of patching, nor commit to release dates for specific fixes.
Click to expand...

guest · Jul 18, 2021

Cryptographers unearth vulnerabilities in Telegram's encryption protocol
July 16, 2021
https://www.cyberscoop.com/telegram-app-security-encryption/

An international team of computer scientists reported on Friday that they found four cryptographic vulnerabilities in the popular encrypted message app Telegram.

The most significant of the vulnerabilities the researchers uncovered is what they called the “crime-pizza” vulnerability. In it, an attacker could alter the order of messages coming from a client to a cloud server that Telegram operates.
The weaknesses range “from technically trivial and easy to exploit to more advanced and of theoretical interest,” according to the security analysis.

“For example, if the order of the messages in the sequence ‘I say “yes” to’, ‘pizza’, ‘I say “no” to’, “crime” was altered then it would appear that the client is declaring their willingness to commit a crime,” according to the universities.
Click to expand...

“For most users, the immediate risk is low, but these vulnerabilities highlight that Telegram fell short of the cryptographic guarantees enjoyed by other widely deployed cryptographic protocols,” a university summary states.
Click to expand...

Log in or Sign up

New breaks of Telegram's crypto found

BoerenkoolMetWorst Registered Member

guest Guest

Log in or Sign up

New breaks of Telegram's crypto found

BoerenkoolMetWorst Registered Member

guest Guest

Useful Searches