CVE-2023-33982 (briar)

Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.

accounts compromise cve decrypt eavesdropping encrypted forward handshake hidden network network traffic protocol service session tor traffic