This commit is contained in:
decanus 2019-08-26 15:25:05 +02:00
parent 5a6b40b2ce
commit a83da16d39
No known key found for this signature in database
GPG Key ID: E95B8C69228FF5B4
1 changed files with 2 additions and 2 deletions

4
x4.md
View File

@ -48,7 +48,7 @@ Please refer to [Initial Message Payload Specification](x8.md) for more details.
# Conversational Security Layer # Conversational Security Layer
Conversational Security Layer provides various cryptographical properties: Conversational Security Layer provides various cryptographic properties:
1. **Confidentiality** - Ensure only intended recipients are able to read a message. 1. **Confidentiality** - Ensure only intended recipients are able to read a message.
2. **Integrity** - No honest party will accept a message modified in the transit. 2. **Integrity** - No honest party will accept a message modified in the transit.
@ -57,7 +57,7 @@ Conversational Security Layer provides various cryptographical properties:
This assumes trust has already been established, see [Initial Trust Establishment Specification](x5.md). This assumes trust has already been established, see [Initial Trust Establishment Specification](x5.md).
5. **Forward secrecy** - Also known as perfect forward secrecy (PFS), gives assurance that session keys will not be compromised even if the private key is compromised. Also, compromising one session key will not result in compromising other sessions. 5. **Forward secrecy** - Also known as perfect forward secrecy (PFS), gives assurance that session keys will not be compromised even if the private key is compromised. Also, compromising one session key will not result in compromising other sessions.
Note: The Status Procol can work with PFS enabled and disabled. In the case of disabled PFS, the encryption is moved to the Privacy Layer and handled by Whisper. Whisper does **not** provide forward secrecy. This is a flaw of the original design which mixes security and private layer responsibilities. With PFS enabled, a message is encrypted twice. Note: The Status Protocol can work with PFS enabled and disabled. In the case of disabled PFS, the encryption is moved to the Privacy Layer and handled by Whisper. Whisper does **not** provide forward secrecy. This is a flaw of the original design which mixes security and private layer responsibilities. With PFS enabled, a message is encrypted twice.
Please refer to [Initial Conversational Security Specification](x6.md) for more details. Please refer to [Initial Conversational Security Specification](x6.md) for more details.