33 matches found
libsignal
概述 libsignal 包含官方 Signal 客户端和服务器所使用的平台无关 API，以 Java、Swift 或 TypeScript 库的形式提供。底层实现使用 Rust 编写： libsignal-protocol：实现 Signal 协议，包括 Double Ratchet 算法。是 libsignal-protocol-java 和 libsignal-metadata-java 的替代品。 signal-crypto：诸如 AES-GCM 之类的密码学原语。我们尽可能使用 RustCrypto 的实现，但有时会有不同的需求。 device-transfer：Signal...
op4
op4 — 安全终端信使 op4 是一款用 Rust 编写的、基于终端的加密消息应用。 它提供使用后量子密码学的端到端加密私密消息， 并完全通过 Tor 网络路由，因此你的消息内容和 IP 地址 都不会暴露给任何人——甚至包括你在交谈的对象。 目录 1. op4 的功能 2. 安装 3. 连接另一名用户 4. 安全模型 5. 架构概览 6. 项目结构 7. 当前状态 op4 的功能 op4 让两个人无需任何一方泄露 IP 地址或真实身份即可 交换私密消息。每条消息都： 端到端加密 — 使用 Double Ratchet 协议，与 Signal 采用的 基本设计相同。 后量子加固 —...
voron-crypto
Biblioteca de criptografía/protocolo Voron — solicitud de revisión Este es el núcleo criptográfico y de protocolo de mensajería de un pequeño proyecto de mensajería E2EE, extraído por separado para su revisión externa. No es el producto completo: el cliente Android y la configuración de despliegu...
Excessive Iteration
Overview Affected versions of this package are vulnerable to Excessive Iteration in the HashRatchet.getint generation method of GroupKeySet, reached through PrivateMessage.unprotect, which loops while nextGeneration generation next; and caches every intermediate KeyGeneration in an unbounded...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
DEBIAN-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
UBUNTU-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
EUVD-2026-52030
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
CVE-2026-59644 affects Bouncy Castle for Java up to version 1.84, where the MLS hash-ratchet may honor an arbitrary 32-bit generation counter from the sender. This can impact availability (per CVSS: HIGH) with no confidentiality or integrity impact reported, and no exploitation details are provid...
PT-2026-67237
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
Signal’s Post-Quantum Cryptographic Implementation
Signal has just rolled out its quantum-safe cryptographic implementation. Ars Technica has a really good article with details: Ultimately, the architects settled on a creative solution. Rather than bolt KEM onto the existing double ratchet, they allowed it to remain more or less the same as it ha...
CVE-2022-45195
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet...
Design/Logic Flaw
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet...