Anyone care to explain how this is supposed to work? If Chadder don't store or transmit the key, how does the person I'm sending a message to have it?
The ambiguity in the way the video explained it makes me a bit suspicious.
The ambiguity in the way the video explained it makes me a bit suspicious.
I guess it's something like:
For messages: AES
Key exchange: RSA
Alice and Bob both generates their own RSA keypair (the server do not have their private keys). Alice generates the AES key to be used with Bob, encrypts it using Bobs public RSA key and then sends it to him.. done
- How is the problem of key distribution solved? How does Bob know that the key is in fact Alices and not Mallorys?
- The scheme you propose does not provide forward secrecy.
- (How) is authentication performed? Are signatures used; if so, are they non-repudiable or deniable?
Secure instant messaging is not a solved problem (at least not in the form of a practical, usable implementation).