raed667 / CryptoFire-Chat

Encrypted chat app using firebase and webcrypto api
https://chat-a9892.firebaseapp.com
MIT License
18 stars 1 forks source link

Perfect Forward Secrecy? Diffie-Hellman Ephemeral Key Exchange? #8

Open thecyberd3m0n opened 4 years ago

thecyberd3m0n commented 4 years ago

I'm new to crypto, but if I understand as well - apps like Signal never uses same keypair to encrypt more than one message. Could this be achieved by web-crypto implementation? Could you help me with "upgrading" your solution? Also - is it safe for Forward Secrecy to consider user's password (from account) as base for keypair?

I'm trying to re-engineer your app into web-based Signal-like solution. Please help me

rmhrisk commented 4 years ago

Here is a webcrypto based implementation of a double ratchet protocol https://github.com/PeculiarVentures/2key-ratchet

thecyberd3m0n commented 4 years ago

Thank you a lot