Signal: Cellebrite claimed to have cracked chat app's encryption
1–7 of 7 posts
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#2 In response to people questioning Cellebrite's claims, the creator of Signal - Moxie Marlinspike - dismissed the idea that the app had been compromised.
"This was an article about 'advanced techniques' Cellebrite used to decode a Signal message on an unlocked Android device," he tweeted.
"They could have also just opened the app to look at the messages.
"The whole article read like amateur hour, which is I assume why they removed it."
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#3[deleted]
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#4My read of Moxie is that he is prone to bluster and bravado but I am not an android appsec expert; can anyone comment on Moxie's assessment of this hack/"hack"?
edit: or you could just downvote a guy asking for info with no explanation?
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#5"Signal keeps its database encrypted using SqlScipher, so reading it requires a key. We found that acquiring the key requires reading a value from the shared preferences file and decrypting it using a key called “AndroidSecretKey”, which is saved by an android feature called “Keystore”.
Once the decrypted key is obtained, we needed to know how to decrypt the database. "
TLDR: which is saved by an android feature called “Keystore”, Android Keystore compromised ?
Original post: https://web.archive.org/web/20201210150311/https://www.celle...
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#6My read of Moxie is that he is prone to bluster and bravado but I am not an android appsec expert; can anyone comment on Moxie's assessment of this hack/"hack"? edit: or you could just downvote a guy asking for info with no explanation?
Not a fan of Signal's phone number requirement and not being fully open source, but that alone makes me suspect of Signal.
Re: Signal: Cellebrite claimed to have cracked chat app's encryption
#7My read of Moxie is that he is prone to bluster and bravado but I am not an android appsec expert; can anyone comment on Moxie's assessment of this hack/"hack"? edit: or you could just downvote a guy asking for info with no explanation?
The comment was probably downvoted because it started with a personal attack. Please omit those.