Replace default auth-hidden-server with 3DH DAKE #15

New Issue

sarah · 2018-07-11T02:38:44Z

sarah commented

2018-07-11 02:38:44 +00:00

Just had a conversation with someone regarding deniability and the way ricochet currently does client authentication in the protocol.

They proposed we replace the current challenge-response protocol (https://github.com/ricochet-im/ricochet/blob/master/doc/protocol.md#authhiddenservice) with a 3DH DAKE - we would then encrypt messages between peers using the derived key.

This would provide offline deniability (not online deniability), and Tor would not break the deniability. An improvement over the current challenge-response protocol which does not provide any kind of deniability.

I will probably implement this as im.ricochet.auth.3dh-dake

Just had a conversation with someone regarding deniability and the way ricochet currently does client authentication in the protocol. They proposed we replace the current challenge-response protocol (https://github.com/ricochet-im/ricochet/blob/master/doc/protocol.md#authhiddenservice) with a 3DH DAKE - we would then encrypt messages between peers using the derived key. This would provide offline deniability (not online deniability), and Tor would not break the deniability. An improvement over the current challenge-response protocol which does not provide any kind of deniability. I will probably implement this as `im.ricochet.auth.3dh-dake`

sarah commented

2018-11-20 20:57:18 +00:00

Implemented as part of v3onion

sarah closed this issue

2018-11-20 20:57:18 +00:00

This repo is archived. You cannot comment on issues.