full-disclosure - Re: Skype chat encryption with OTR

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080619082846.59eb3cd5@wssyg117.sygroup-int.ch>
Date: Thu, 19 Jun 2008 08:28:46 +0200
From: Tonnerre Lombard <tonnerre.lombard@...roup.ch>
To: rawket <r4wk3t@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Skype chat encryption with OTR

Salut, rawket,

On Thu, 19 Jun 2008 13:00:49 +1000, rawket wrote:
> /There is no denying that an OTR Conversation has been encrypted..
> Its because the private keys change ultra-frequently, and the keys
> are short lived that it provides the 'plausible deniability'

Not exactly. The plausible deniability is due to the fact that the
signature is executed using a symmetric key known to both parties, so
that either party (but noone else) could have sent the message.

				Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Solutions Systematiques
Tel:+41 61 333 80 33		Güterstrasse 86
Fax:+41 61 383 14 67		4053 Basel
Web:www.sygroup.ch		tonnerre.lombard@...roup.ch

Download attachment "signature.asc" of type "application/pgp-signature" (836 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/