Joined 2 days ago
This is an incredibly overconfident statement, given that no one can definitively prove WhatsApp or production consumer builds of Signal actually encrypt anything (note: this is unrelated to Signal builds compiled by users themselves).
Existing reverse-engineering papers on WhatsApp merely confirm the presence of cryptographic primitives and function markers. They fail to prove actual runtime encryption or decryption of user messages, nor guarantee the absence of a cryptographic bypass or secret switches embedded within the builds.
To maintain strict factual accuracy, the author should have instead mentioned Delta Chat and SimpleX Chat, that publish fully reproducible builds.
This is an incredibly overconfident statement, given that no one can definitively prove WhatsApp or production consumer builds of Signal actually encrypt anything (note: this is unrelated to Signal builds compiled by users themselves).
Existing reverse-engineering papers on WhatsApp merely confirm the presence of cryptographic primitives and function markers. They fail to prove actual runtime encryption or decryption of user messages, nor guarantee the absence of a cryptographic bypass or secret switches embedded within the builds.
To maintain strict factual accuracy, the author should have instead mentioned Delta Chat and SimpleX Chat, that publish fully reproducible builds.