E2EE - Githubissues

Suyious / purrr.backend

Backend for Purrr - Chat Application that connects randomly among online users

https://purrr.chat

1 stars 2 forks source link

E2EE #6

Closed costomato closed 1 month ago

costomato commented 1 month ago

There's no end to end encryption as of now.

Use RSA or ECC for encryption
I recommend ECC
Backend libraries: node-forge, crypto, libsodium
Frontend libraries: tweetnacl, openpgp.js

Suggested Setup:

Key Exchange: Use ECC with libsodium for generating key pairs and exchanging public keys.
Message Encryption: Use AES-GCM from crypto or libsodium for encrypting messages.
Data Integrity: Use HMAC (with SHA-256) alongside AES-GCM to ensure data integrity.

costomato commented 1 month ago

assign this to me