000@reddthat.com to Technology@lemmy.worldEnglish · 4 months agoDon’t Use Session (Signal Fork).soatok.blogexternal-linkmessage-square15linkfedilinkarrow-up1151arrow-down18cross-posted to: privacy@lemmy.mlprivacy@lemmy.worldprivacy@lemmy.ml
arrow-up1143arrow-down1external-linkDon’t Use Session (Signal Fork).soatok.blog000@reddthat.com to Technology@lemmy.worldEnglish · 4 months agomessage-square15linkfedilinkcross-posted to: privacy@lemmy.mlprivacy@lemmy.worldprivacy@lemmy.ml
minus-squarevollkorntomate@infosec.publinkfedilinkEnglisharrow-up43·4 months ago […] it uses the X25519 public key… as a symmetric key, for AES-GCM. […] anyone that knows the public key can decrypt it. Ouch.
Ouch.