Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Oh wow. It uses a very innovative REST key exchange protocol.

Encryption:

  * Messages are encrypted with AES 128 CBC
  * Random key for each message
  * The AES key is sent to the server, and exchanged for some key-id
  * They key id is prepended to the message
Decryption:

  * Split message into key id and encrypted part
  * Download key from server
  * Decrypt message
Edit: Decompile it to see for yourself


It's based on "scrambls", and they have a description of their protocol here:

https://developer.scrambls.com/bin/view/Main/P4ComponentInte...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: