Crypto audit of Threema revealed many vulnerabilities

Researchers have discovered cryptographic vulnerabilities in Swiss-based secure messaging application Threema that may have allowed attackers to do things like break authentication or recover users’ long-term private keys. The vulnerabilities have been… Continue reading Crypto audit of Threema revealed many vulnerabilities

Threema: Are received messages exposed, when sender’s private key gets compromised?

Note: This question is specific to the Threema Messenger, and relates to their implementation of encryption (using the NaCl ECDH implementation as per their docs).

I refer specifically to their “note on outgoing messages” in their validat… Continue reading Threema: Are received messages exposed, when sender’s private key gets compromised?

WhatsApp, Signal group chats not as secure as users might believe

Researchers have discovered flaws in the way WhatsApp, Signal, and Threema messaging apps handle secure (encrypted) group communication, which could result in unauthorized users getting added to closed groups and monitoring future conversations within … Continue reading WhatsApp, Signal group chats not as secure as users might believe

Flaw in WhatsApp and Signal exposes group chats to ‘extremely difficult’ hacks

A flaw in popular encrypted chat programs WhatsApp, Threema and Signal theoretically allows almost anyone to control important servers, bypass encryption and add themselves to group chats. New research from a team of German cryptographers presented Wednesday at the Real World Crypto conference in Zurich, Switzerland zeroed in on group messaging to show that security for a one-on-one conversation is far ahead of group chats. The vulnerabilities found in Threema and Signal are relatively harmless compared to the problems researchers found with WhatsApp, because of the relative ease with which new people can be inserted into private groups without any permission. “The confidentiality of the group is broken as soon as the uninvited member can obtain all the new messages and read them,” Paul Rösler, one of the Ruhr University researchers behind the new finds, told Wired. “If I hear there’s end-to-end encryption for both groups and two-party communications, that means adding of […]

The post Flaw in WhatsApp and Signal exposes group chats to ‘extremely difficult’ hacks appeared first on Cyberscoop.

Continue reading Flaw in WhatsApp and Signal exposes group chats to ‘extremely difficult’ hacks