Hacker News new | ask | show | jobs
by pfg 3645 days ago
Being able to decrypt messages should certainly not be the benchmark you use when evaluating crypto, especially when it comes to rather new protocols. History has shown that severe theoretical issues that cryptographers have been warning against for years (see: CBC and padding oracle attacks) will almost always lead to practical attacks eventually.

Telegram has a number of those weaknesses, and many of its implementation details don't paint a good picture in terms of security either[1].

[1]: https://twitter.com/matthew_d_green/status/72646884513381171...