all InfoSec news
Automatic Detection of Fake Key Attacks in Secure Messaging. (arXiv:2210.09940v1 [cs.CR])
cs.CR updates on arXiv.org arxiv.org
Popular instant messaging applications such as WhatsApp and Signal provide
end-to-end encryption for billions of users. They rely on a centralized,
application-specific server to distribute public keys and relay encrypted
messages between the users. Therefore, they prevent passive attacks but are
vulnerable to some active attacks. A malicious or hacked server can distribute
fake keys to users to perform man-in-the-middle or impersonation attacks. While
typical secure messaging applications provide a manual method for users to
detect these attacks, this burdens …
attacks automatic detection fake key messaging secure messaging