Automated Symbolic Verification of Telegram's MTProto 2.0 · HackerPapers discussions

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by gloosx

Sun, 25 Aug 2024 16:22:19 GMT

That's a popular lie, Telegram uses the MTProto 2.0 Cloud algorithm for non-secret chats, which is audited and verified by multiple independent parties. For example WhatsApp claims it uses EE2E encrypted chats, how ever these claims are unverified and not audited. Also their chief executives are not in jail, coincidentally. You can consult these links if you want to read more about it: https://core.telegram.org/mtproto/AJiEAwIYFoAsBGJBjZwYoQIwFM... https://arxiv.org/pdf/2012.03141 https://github.com/miculan/telegram-mtproto2-verification

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by NayamAmarshe

Sun, 25 Aug 2024 15:53:47 GMT

> They are stored in plaintext on telegram servers FYI, this is a totally misleading and false claim. Telegram uses the MTProto 2.0 Cloud algorithm for non-secret chats[1][2]. In fact, it uses a split-key encryption system and the servers are all stored in multiple jurisdictions. So even Telegram employees can't decrypt the chats, because you'd need to compromise all the servers at the same time. Telegram's algorithm has been independently audited multiple times. Compared to other apps like WhatsApp with claims of E2EE and no body of verification and validation.[3] [1]…

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by robryk

Thu, 13 Apr 2023 18:39:55 GMT

> The algorithm is public. It is a straightforward application of well known primitives. It is hardly proprietary. Note that its predecessor, was very much not that (e.g. https://words.filippo.io/dispatches/telegram-ecdh/ was a vulnerability in it, and it stuck to some weird choices of crypto primitives/key sizes for a pretty long time). This colors my expectations about the current version slightly. I personally know nothing about the current protocol used (mtproto 2.0) and a few minutes of googling surfaced https://eprint.iacr.org/2022/595.pdf, https://eprint.iacr.org/2023/469 and…

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — HN submission

Wed, 11 Jan 2023 16:46:19 GMT

Telegram's MTProto 2.0 proven formally correct (2021) [pdf]

3 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by lloeki

Fri, 07 Oct 2022 18:01:22 GMT

> Telegram holds the keys to decrypt the messages and that's all you need to know. That's an entirely different problem than TFA (an attacker accessing and being able to impersonate an account by subverting a third party 2FA middleman), which Telegram guards against as as soon as you have one device enrolled the code is sent over Telegram, not SMS. > It's why you are able to just login to your Telegram account on another device and magically get all of your message history. Being able to log in and get your history to sync is not a telltale sign that history is not encrypted and thus visible…

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — HN submission

Mon, 11 Jan 2021 00:10:29 GMT

Automated Symbolic Verification of Telegram's MTProto 2.0

64 points; 53 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by j-james

Thu, 07 Jan 2021 14:13:41 GMT

Each of these have fairly different use cases. WhatsApp is bad. They are owned by a data collection company notorious for gross privacy violations. Both the client apps and the server are completely closed source, which means either could be spying on you without any way to know. They do claim to implement the secure Signal Protocol, but how do you verify end to end encryption without seeing source code, anyway? Telegram is a perfectly adequate choice. The user experience is similar to WhatsApp. It does practice some dark patterns - end to end encryption is only available in "secret chats"…

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by j-james

Wed, 06 Jan 2021 23:16:35 GMT

Telegram's MTProto 2.0 encryption protocol was recently proved correct, but I haven't seen any peer review or discussion on the paper yet. https://arxiv.org/abs/2012.03141

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — HN submission

Tue, 05 Jan 2021 06:57:24 GMT

Automated Symbolic Verification of Telegram’s MTProto 2.0

1 point; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — mentioned by j-james

Tue, 05 Jan 2021 04:13:54 GMT

Telegram's protocol itself isn't necessarily a weakness - recently, a paper was published claiming to have proved the MTProto 2.0 protocol correct. Perhaps because of how recent this was, it doesn't seem to have garnered any discussion or review anywhere. https://arxiv.org/abs/2012.03141

Paper and discussion history. A mention is not an endorsement.

Automated Symbolic Verification of Telegram's MTProto 2.0 — HN submission

Thu, 24 Dec 2020 01:49:52 GMT

Automated Symbolic Verification of Telegram's Cryptographic Protocol

7 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.