vanitasvitae / Smack

A modular and portable open source XMPP client library written in Java for Android and Java (SE) VMs
https://igniterealtime.org/projects/smack/
Apache License 2.0
16 stars 3 forks source link

Allow proper signedPreKey rotation #8

Closed vanitasvitae closed 7 years ago

vanitasvitae commented 7 years ago

Background: The client should generate and publish a new singedPreKey in their bundle every now and then (7-14 days). The old signedPreKey must be kept for ~a month in order to decrypt delayed preKeyMessages that were encrypted using the old signedPreKey. In order to strengthen forward secrecy, the old key should be deleted after a month though.

Possible solutions:

Manual rotation of the signedPreKey is already possible

vanitasvitae commented 7 years ago

Keys are renewed every week now.

vanitasvitae commented 7 years ago

Done. Old keys are now also removed.