Matrix chat encryption sunk by five fatal holes
A variant of the"Trusted Impersonation" attack, tracked under the same CVE, is referred to as"Malicious key backup." It's a scenario in which a malicious homeserver admin could add a malicious key backup to the user's account to exfiltrate message keys.
With the impersonation bug, the matrix-js-sdk accepts keys forwarded by other users that have not been requested. This allows malicious admins to impersonate other users, though some clients such as Element will present a warning:"The authenticity of this encrypted message can't be guaranteed." And the"IND-CCA break" attack could allow"an adversary is able to decrypt a challenge ciphertext by querying encryption and decryption oracles, without requesting decryption of the challenge ciphertext directly," the paper explains. However, the researchers say this attack is only theoretical as they don't see a practical way to carry it out. Repairs are nonetheless planned.
Danmark Seneste Nyt, Danmark Overskrifter
Similar News:Du kan også læse nyheder, der ligner denne, som vi har indsamlet fra andre nyhedskilder.
New Overwatch 2 users will have to play 100 matches to unlock all original heroes | VGCOverwatch 2 players who are new to the series will have to play 100 matches to unlock all the original heroes. In-game chat and competitive modes will also be locked until players meet certain requirements
Læs mere »
Hurricane Ian - live updates: 20 missing after boat sinks off Florida coast as Hurricane Ian makes landfall; more than one million lose powerHurricane Ian is approaching the coast of Florida, where it's expected to be one of the 'strongest storms ever' to hit the US. There are concerns it could bring 'devastating' storm surge. Sky's marthakelner is in Fort Meyers, Florida. Latest:
Læs mere »
Asthma patients fear winter cost of living crisis as they struggle to heat homes'How far do we have to sink to the bottom of the barrel before we are given some support'
Læs mere »
This Morning viewers gush over Mark Owen's appearance despite 'criminal' moveThe Take That star caught viewers' attention as he chatted to Phillip and Holly about his new music and tour
Læs mere »
It was Queen Elizabeth's ‘dearest wish’ that Prince Harry patched things up with the Royal Family'It would have been one of her dearest wishes that they patch things up.' ❤️
Læs mere »