Hacker News new | ask | show | jobs
by some_furry 241 days ago
This is factually incorrect.

https://soatok.blog/2025/02/18/reviewing-the-cryptography-us...

https://soatok.blog/2024/08/14/security-issues-in-matrixs-ol...

Signal uses a whole suite of modern cryptography, including post-quantum ratchets for key agreement and zero-knowledge proofs for group membership.

Meanwhile, Matrix has a plaintext mode and knowingly shipped libraries with side-channels for years, by their own admission (and left many clients in the ecosystem depending on the vulnerable C implementation when they rewrote their cryptography protocol in Rust).

Even today, they are not the same protocol. Olm/Megolm is distinct from Signal in a lot of ways that I've outlined in my previous blog posts.

I don't particularly care if people like Matrix, but please don't spread falsehoods about the cryptography being used.