Don’t Use Session (Signal Fork). - eviltoast
  • vollkorntomate@infosec.pub
    link
    fedilink
    English
    arrow-up
    28
    ·
    16 hours ago

    […] it uses the X25519 public key… as a symmetric key, for AES-GCM.
    […] anyone that knows the public key can decrypt it.

    Ouch.