Replying to Avatar Max

Awesome!

But it's still clear that the receiver got a message, just not who the sender is, right?
Avatar
Max 2y ago

How does the disappearing messages work?

Reply to this note

Please Login to reply.

Discussion

Avatar
Vitor Pamplona 2y ago

Disappearing is for your outgoing messages only. Just don't send the Gift wrap to yourself and you won't be able to recover your messages.

Avatar
Max 2y ago

Thanks.

This scheme does NOT have forwarded Secrecy of the receiver, right?

I guess there is forward Secrecy for the sender due to the ephemeral key of the gift wrap. But the receiver has only a single long term static key.

Avatar
Max 2y ago

And as soon as your backup scheme is used, there is no forward secrecy anymore anyhow.

Avatar
Vitor Pamplona 2y ago

Is that true? I was hoping the link between the keys remained offline. The secrecy would only break if the attacker got the main key and the backup key.

Avatar
Max 2y ago

Ah, so the main key does a gift wrap to send the backup to a new pubkey, thats why the relationship between these two keys is private?

Avatar
Max 2y ago

And thus even if the main key leaks, the backup keys are not known.

Avatar
Vitor Pamplona 2y ago

And if you need to access the backups just giftwrap them with yet another key so that they backup key never leaves the backup client.

Avatar
Max 2y ago

Ok, thanks.

So, is it correct that the sender has forward secrecy, the receiver does not?

Avatar
Vitor Pamplona 2y ago

I think so. Maybe the better way is that we haven't been able to figure out a way to do it yet.

Avatar
Vitor Pamplona 2y ago

Yep, the main key doesn't have any gift wrap to recover from.

Avatar
Vitor Pamplona 2y ago

Correct. The use of the main key as receiver makes it country party trustless. If the receive uses a separate key to receive, he just needs to leak that key to expose the sender.

Avatar
Vitor Pamplona 2y ago

* Counter party.

Avatar
Max 2y ago

I see, that's a fascinating incentive design.