Practical Attacks on a Decentralized Secure Messenger Session
summary
Analyzes Session Protocol V1 and demonstrates three concrete exploits: a spoofing/impersonation attack that leverages lack of mutual public key authentication to substitute long‑term keys (anyone can join the permissionless network), a timestamp forgery that inserts messages out of order to alter contractual evidence, and message drop/replay/duplication attacks caused by no cryptographic binding to monotonic sequence counters and client reliance on node‑provided hashes; attacks are practical against swarms in the deployed network (≈1M installs), and short‑term app fixes plus protocol V2 design changes are proposed.
AI-written summary · about
chapters (4)
- 0:00Introduction and motivation
- 2:38Core protocol architecture
- 5:28Vulnerability analysis
- 12:38Mitigations and conclusion
related talks
44mBeyond End to End Encryption
32m(In)Secure Messaging Apps: A Lateral Movement Into Your Privacy
58mExploiting web messaging implementations
34mPractically-exploitable Cryptographic Vulnerabilities in Matrix
47mKey Reinstallation Attacks: Breaking the WPA2 Protocol
47mFinding a Needle in an Encrypted Haystack
54mBroken Crypto is Broken
40mTerrapin Attack: Breaking SSH Channel Integrity by Sequence Number Manipulation