TextSecure, Now With 10 Million More Users

https://whispersystems.org/blog/cyanogen-integration/

by makepanic • 13 years ago

146 66 13 years ago

Can someone explain how the keying system works? What is the secret information a user needs to decrypt messages addressed to them? What prevents a 3rd party from decrypting those messages? What is the 'key'?

Timmmmbob• 13 years ago

The first time you send an encrypted message keys are exchanged automatically. Thereafter it tells you if the second party's identity changes from the first message.

If you're thinking "But MitM!!!" then don't. The main weakness of this is actually the plausibility of losing your phone, and hence encryption keys. Unless perhaps they are stored on Google/WhisperSystems' servers. If not it would open you up to this weakness: "Hey, ignore the security warning for this text - I got a new phone so the keys changed. Remind me again what our secret terrorist plan is?"

mike-cardwell3• 13 years ago

You generate a keypair. They generate a keypair. You swap public keys. Then you encrypt messages to each other using the other persons public key.

Of course, that is still vulnerable to an active MITM attack where somebody intercepts the initial key exchange and inserts their own keys. The app has a built in option to display your fingerprints so you can compare them if you meet the other person.

Even with this vulnerability, imagine if everyone started using it overnight... All of a sudden there wouldn't be millions (billions?) of new private messages stored in a bunch of databases every day. The telcos aren't going to perform an active MITM attack to decrypt peoples SMS.

StavrosK3• 13 years ago

The telcos aren't going to perform an active MITM attack to decrypt peoples SMS.

An optimist!

Given how easy it would be to do, I think they'd at least think about it. However, it's also trivial to detect, so we have that going for us.

happywolf• 13 years ago

If there are a lot of people start using this, I imagine some entities can easily force all the traffics through a system that will handshake on both sides and intercepting all the contents.

salient2• 13 years ago

Awesome, I've been waiting for this. Now CyanogenMod should be the most secure OS out there against snooping, even compared to Google's own Android. Too bad Google isn't taking steps to offer end-to-end encrypted communication for Android devices.

foobarqux2• 13 years ago

CyanogenMod is far from secure. Moxie has talked about this before.

StavrosK3• 13 years ago

Do you have more details?

schabernakk• 13 years ago

I am really looking forward to TextSecure for iOS. I hope I am wrong on this one, but from the text on their Website Heml.is doesn't seem to be too eager to open source their code after release.

I don't know any details about whispersystems (except that moxie marlinspike is with them) but I sure do hope they can provide a well designed cross platform messaging app completely open source (which I don't think exists yet)

mike-cardwell3• 13 years ago

On Hemlis's front page:

"We have all intentions of opening up the source as much as possible for scrutiny and help! What we really want people to understand however, is that Open Source in itself does not guarantee any privacy or safety. It sure helps with transparency, but technology by itself is not enough."

They have no intention of releasing the source code. Use https://www.surespot.me/ instead, it does the same stuff, already exists, and is released under the GPL (v3).

perlpimp• 13 years ago

Sounds like a trap to me, not having the source code. Maybe it works for now but investing trust as things are now I'd rather go with opensource client.

Trust must be earned, so far it they brag about way they made tech work with a patched version of android - they don't really put forth anything that will give them credibility as a very secure protocol.

Claims without proof are just that.

tptacek7• 13 years ago

You'd be making a pretty big mistake to opt for something that hadn't been vetted, over TextSecure, simply because of the availability of source code.

em3rgent0rdr• 13 years ago

Surespot depends on a bunch of google play services and is officially distributed on google play. Is there a way to install pre-compiled surespot apk outside of google play for those that don't install proprietary google code on their phone? I noticed that the open-source android apk repository F-Droid can't distribute it for this reason: https://f-droid.org/forums/topic/surespot-encrypted-messagin...

(Side note: moxie prohibits TextSecure on F-Droid as there is no forced auto update like google play. I currently have to download and compile the TextSecure source code myself, which is no biggie, but as a CM user, I'm definitely excited about this integration!)

rfnslyr4• 13 years ago

I'm currently working on an application similar to this, but with a small physical device you plug into the bottom of your phone where all the encryption is done, so there is no central software you can break into, it's all done physically, disconnected. You communicate the decryption keys to the parties in person. We want to make this a little device you can attach to a key chain and plug into the bottom of your phone whenever you need encryption. Our app interfaces with the dongle and you can use it to encrypt/decrypt any files really.

Is this a retarded idea or is there a use for this?

gburt• 13 years ago

Doesn't there need to be a software input / output layer anyway? How can you secure this?

(genuine interest, not an attack)

rfnslyr4• 13 years ago

That's what we're trying to tackle. See my response here:

https://news.ycombinator.com/item?id=6876655

Can anyone see this as viable? My co founder and I are very very passionate about this project, and the last thing we want to do is poor in years into something that won't see the light of day!

devindotcom• 13 years ago

Someone can always hack the display driver - you have to display the messages to the user at some point, after all. Take a screenshot on whatever user event, encryption bypassed.

I've been thinking about encryption all the way up to the display module, though, meaning interception would have to be very close to the display hardware itself.

rfnslyr4• 13 years ago

That's what I was thinking. We are going to ship two versions. One being a simple dongle where the application used to interface with it is the users phone.

We're also selling a premium package, where the device is much bigger but includes a physical display and keyboard, with a transfer mechanism of the final encrypted message.

We're marking up the higher end model so we can fund the lower end model, being 2 replacements of the dongle for 1 purchase, as the dongle will have a one time authentication and will be locked to the device.

We're also trying to figure out how to have the device self destruct if not used by any approved devices, meaning whipe itself clean and POSSIBLY break the hardware that does the processing/houses any data.

salient2• 13 years ago

I don't know how it will do as a niche thing in enterprise, but I think it's very unlikely it will ever catch-on with with mainstream users. It just seems too much of a hassle. Now turn that into an NFC ring of sorts that does the encryption for you, and you may be on to something, but even then it still seems something only geeks would use. Heck, it's hard enough to get people to use software-based encryption solutions.

latortuga2• 13 years ago

I used TextSecure as my text client exclusively for about the last 6 months and it worked great except for 3 things: group messages and MMS. Something changed recently that prevented any MMS from showing up and it kept offering for me to configure the proxy settings. I looked briefly for the correct settings but there don't seem to be any for Verizon on their list. Group messages just didn't seem to work the way the do in the normal Android client. Texting worked flawlessly though it's sort of chicken and egg - no one I know used it so none of my communication was encrypted in transit.

Oh and the third thing: my SO thought I was borderline paranoid/crazy/hiding something for even installing it.

moxie2• 13 years ago

FYI, from another Verizon user: https://github.com/WhisperSystems/TextSecure/issues/467

Looks like we need to add some new MCC/MNC values to the defaults for that MMSC. Group messages use MMS, so hopefully this gets you down to one problem (paranoid). =)

latortuga2• 13 years ago

I really appreciate the response, Moxie. I admire your work and your privacy advocacy and I downloaded TextSecure after seeing it here and associated with your name. I'll take another look and see if that link can solve my (technical) issues.

bradleysmith• 13 years ago

This was my exact usage problem with it as well. It was seamless in receiving standard SMS, but MMS & group messages simply did not come through, though I would be alerted to receiving them.

I gave up on TextSecure because of the flaw. I'll pick it back up if there's a fix.

moxie2• 13 years ago

There was a period of time where Android made a sudden unannounced change to an app's ability to access APN settings on the device, which prevented MMS from working.

We now prompt users to configure their MMSC for their carrier if APN details are not available from the device.

If you have problems like this in the future and would like to help the project get better, please file the bugs you encounter on the GitHub issue tracker so that we can get the information we need to fix them for everyone.

nl• 13 years ago

Just noting that when Google switched to using the Hangout app for SMS/MMS messaging, it broke MMS for me - so that problem is hardly unique to TextSecure

sachingulaya• 13 years ago

I understand HN is not tech support but...

TextSecure crashed on receiving MMS on my Nexus 5 on T-mobile's value plans(I mention their value plan because it works slightly differently than their regular ones). After I manually configured the MMSC it stopped crashing and displays MMS correctly.

sailfast• 13 years ago

This looks awesome and definitely makes me lean more towards an Android OS for a future phone.

This is not a dig, but because the SMS system is SO transparent a user may not be able to tell which of their messages / contacts allow encrypted traffic (based on the screenshot in the post). I might add a lock or some other mechanism to indicate which messages are secured.

conroy3• 13 years ago

They are planning on adding that soon (from the post):

    We will also be adding some minimal visual feedback to the stock
    CyanogenMod Messaging app to indicate when the user has an 
    expectation of privacy and when they don’t, but the base 
    experience won’t change at all.

privong• 13 years ago

Here's cyanogenmod's side of the announcement: http://www.cyanogenmod.org/blog/whisperpush-secure-messaging...

jcastro• 13 years ago

I really like the "Disable passphrase" option.

Having to enter that all the time made this a dealbreaker with my wife last time. I figure just encrypt the handset and that'll be good enough.

hawkharris• 13 years ago

The apps look great, but I don't have an Android. Does anyone know if there's a good iOS equivalent?

conroy3• 13 years ago

WhisperSystems is working on an iOS app https://github.com/whispersystems/TextSecure-iOS

andor• 13 years ago

In case anyone else is wondering: if sender and recipient use CM or TextSecure, the encrypted messages are not sent via GSM SMS. The transport uses Procotol Buffers, HTTP and Google Cloud Messaging/Apple Push Notifications.

StavrosK3• 13 years ago

Thank you, I was wondering about that, mainly because I think that, the last time I used TextSecure, messages were going over SMS.

eyeareque• 13 years ago

Can the government force TextSecure server admins to provide access to user messages?

tptacek7• 13 years ago

No.

conroy3• 13 years ago

The TextSecure server never has access to message bodies. However, the government could force the server admins to provide timestamps and metadata for all messages. The TextSecure server knows who* and when you talk to someone, but not the contents of the conversation.

* The who in this case is a hash of the recipient's phone number. I'm not sure how difficult it is to turn this value into a real phone number.

nwh• 13 years ago

A hash of a phone number or IP address would be trivial to reverse.

nicholasjarnold• 13 years ago

This is truly great work by Moxie, CyanogenMod devs and everyone else who may have contributed to this project. Kudos guys/gals!

One important implementation detail question that comes to mind is "How does the system detect and fix the issue of key exchange errors?"

While using the TextSecure app from the Play store, I've experienced a situation twice where a key exchange would have to be re-initiated manually after a friend and I got out of sync (he was receiving my messages garbled in TextSecure). I imagine it's possible for this to happen in the built-in Cyanogenmod version, and I don't see any documentation specifically addressing it. Without visual notification of a "secured" connection, the user could end up inadvertently sending plain-text messages.

quaz3l• 13 years ago

This is how I always thought Google would eventually implement an iMessage-like protocol. By taking the last step before sending the SMS out, and checking to see if the recipient is also part of the service, and sending it over the service instead of through the open. Love it, just hope my HTC One S will still work with a nightly. ;P

streetnigga• 13 years ago

I did not read anything about what current users may need to do. I've been using TextSecure for some time now and _just_ got a phone that was worthy of putting CyanogenMod on.

So I did.

Did my eyes gloss over the details or is there some method of importing current TS databases I may need to know about?

mikevm• 13 years ago

Doesn't the fact that mobile phones have an extra closed-source baseband OS that can control the phone on a lower level than the secondary OS (Android) make any attempt at securing the secondary OS pointless? I mean, the baseband might have a keylogger and send all your data to your provider anyway...

TextSecure, Now With 10 Million More Users

Related Stories