7 ms·
I was referring to the padding attack. Did they patch this? And are there any property of MTProto that makes it infeasible to replace AES IGE in a later revisi
by janinge 10y ago
I was referring to the padding attack. Did they patch this?
And are there any property of MTProto that makes it infeasible to replace AES IGE in a later revision of the protocol?
- CiPHPerCoder 10y agoThe problem isn't IGE. It's that they're using SHA1 (not HMAC-SHA1) in a "MAC and Encrypt" construction.