Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RSA Authentication #1

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

RSA Authentication #1

wants to merge 4 commits into from

Conversation

rctl
Copy link
Owner

@rctl rctl commented Mar 24, 2017

Enhances security by enabling RSA authentication for numbers, old numbers that previously used authentication keys will be automatically upgraded to RSA authentication and the authentication key will be disabled. This makes it harder to gain control of a number as the effective key length is drastically increased and the server-side stored number files no longer contain any sensitive data at all. The private key is only stored on the device that first claimed the number, when that devices storage is cleared there is no way to ever re-use the numbers without wiping the server storage to forget the directory of used numbers. This also opens the ability for the server to request clients to sign additional data associated with a number.

Planned for next update: Have devices store a numbers public key on first contact with that number and reject any other attempts to initialize calls with that number in the future if the public key has been altered. Also allow for two devices to exchange voice encryption keys using these certificates and do visual comparison of the certificates fingerprints.

This version also enhances user experience by adding vibration on incoming calls and dial tones on outgoing calls.

@rctl rctl self-assigned this Mar 24, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant