6 ms·

Moxie is a great researcher and WhisperSystems seem serious. However, I don't understand why you claim that TextSecure is designed by cryptographers. From what

Moxie is a great researcher and WhisperSystems seem serious. However, I don't understand why you claim that TextSecure is designed by cryptographers. From what I've seen, they use something called the "Axolotl Ratchet", developed by Trevor Perrin. A quick search of his name didn't yield any crypto papers / research by him. Also, you write "and has been studied in detail for years" There are no links/references to code/protocol reviews in the WhisperSystems website. Again, I have the utmost respect for their research, it's just that from the side of a non-crypto-versed user/coder, Telegram and TextSecure look the same.

sillysaurus2 13y ago
I don't understand why you claim that TextSecure is designed by cryptographers. From what I've seen, they use something called the "Axolotl Ratchet", developed by Trevor Perrin. Here are some resources: https://www.hnsearch.com/search#request/all&q=by%3Atptacek+trevor https://www.hnsearch.com/search#request/all&q=by%3Atptacek+t... https://www.whispersystems.org/blog/advanced-ratcheting/ https://www.whispersystems.org/blog/advanced-ratcheting/ https://pond.imperialviolet.org/ https://pond.imperialviolet.org/
tptacek 13y ago
Trevor Perrin is a cryptographer.
moxie 13y ago
Trevor Perrin worked at Cryptography Research (I mean, the domain name is cryptography.com!) for six years, which alone should probably be enough to call yourself a cryptographer. His other work outside of CRI is also really quite prolific. > Again, I have the utmost respect for their research, it's just that from the side of a non-crypto-versed user/coder, Telegram and TextSecure look the same. Yep, it's frustrating to be the quixotically genuine seller in a market for lemons.
- conradev 13y ago
  I have a question about TextSecure. Do you plan on implementing something like SMP from OTRv3 in the TextSecure protocol?
mattlutze 13y ago
Perrin appears to be one of the lead authors here: http://tack.io/draft.html http://tack.io/draft.html You might also try reading some of his more recent discussion comments on IETF working groups: - http://www.ietf.org/mail-archive/web/websec/current/maillist.html http://www.ietf.org/mail-archive/web/websec/current/maillist... - http://www.ietf.org/mail-archive/web/tls/current/maillist.html http://www.ietf.org/mail-archive/web/tls/current/maillist.ht... - (from 2002): http://mhonarc.domainunion.de/archive/html/ietf-openpgp/2002-09/index.html http://mhonarc.domainunion.de/archive/html/ietf-openpgp/2002... Just a few things that turned up when I Googled him.

sillysaurus2 13y ago

I don't understand why you claim that TextSecure is designed by cryptographers. From what I've seen, they use something called the "Axolotl Ratchet", developed by Trevor Perrin. Here are some resources: https://www.hnsearch.com/search#request/all&q=by%3Atptacek+trevor https://www.hnsearch.com/search#request/all&q=by%3Atptacek+t... https://www.whispersystems.org/blog/advanced-ratcheting/ https://www.whispersystems.org/blog/advanced-ratcheting/ https://pond.imperialviolet.org/ https://pond.imperialviolet.org/

tptacek 13y ago

Trevor Perrin is a cryptographer.

moxie 13y ago

Trevor Perrin worked at Cryptography Research (I mean, the domain name is cryptography.com!) for six years, which alone should probably be enough to call yourself a cryptographer. His other work outside of CRI is also really quite prolific. > Again, I have the utmost respect for their research, it's just that from the side of a non-crypto-versed user/coder, Telegram and TextSecure look the same. Yep, it's frustrating to be the quixotically genuine seller in a market for lemons.

conradev 13y ago
I have a question about TextSecure. Do you plan on implementing something like SMP from OTRv3 in the TextSecure protocol?

mattlutze 13y ago

Perrin appears to be one of the lead authors here: http://tack.io/draft.html http://tack.io/draft.html You might also try reading some of his more recent discussion comments on IETF working groups: - http://www.ietf.org/mail-archive/web/websec/current/maillist.html http://www.ietf.org/mail-archive/web/websec/current/maillist... - http://www.ietf.org/mail-archive/web/tls/current/maillist.html http://www.ietf.org/mail-archive/web/tls/current/maillist.ht... - (from 2002): http://mhonarc.domainunion.de/archive/html/ietf-openpgp/2002-09/index.html http://mhonarc.domainunion.de/archive/html/ietf-openpgp/2002... Just a few things that turned up when I Googled him.