1
$\begingroup$

As I look over the TexSecures specifications for multi-party chat I have noticed this. Also as far as I understood in TextSecure (now known as Signal) the minimal steps required to do a secure multiparty chat using

  1. Generate ephemeral symmetric key K
  2. Encrypt the message.
  3. Hash the message's plaintext and encrypt the hashes with the key K.
  4. Send cyphertext,hashes and the key K.

Also by improving it, if client generated an ephemeral signing key as well it can rachet the key and send few messages as well. But whilst I read that and have looked the schema a few questions have been rised to me:

  1. Is assumed the communication channel to be previously secured when the key K is being sent. I mean transmitting private keys is like you are asking for your security to be compromised.
  2. What if the ephemeral key K actually has been compromised?

Can you help me to answer these questions?

$\endgroup$
1
$\begingroup$
  1. Yes, the channel is assumed to be secure. "When sending a message to a group, we simply deliver a pairwise encrypted message to each member of the group."
  2. It's ephemeral. The double ratchet system ensures that ephemeral keys get changed out, so the compromise will be recovered from.
$\endgroup$

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.