No not the movie: the secure group messaging protocol! Or rather all the bugs and vulns that a team of researchers found when trying to formalize said protocol. Martin Albrecht and Dan Jones joined us to walk us through "Practically-exploitable Cryptographic
Vulnerabilities in Matrix".

Links:

https://nebuchadnezzar-megolm.github.io/static/paper.pdf
https://nebuchadnezzar-megolm.github.io
Signal Private Group system: https://eprint.iacr.org/2019/1416.pdf
https://signal.org/blog/signal-private-group-system/
https://spec.matrix.org/latest/
WhatsApp Security Whitepaper: https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
https://www.usenix.org/conference/usenixsecurity21/presentation/albrecht FS, PCS etc
Other clients: https://nvd.nist.gov/vuln/detail/CVE-2022-39252 https://nvd.nist.gov/vuln/detail/CVE-2022-39254 https://nvd.nist.gov/vuln/detail/CVE-2022-39264
https://dadrian.io/blog/posts/roll-your-own-crypto/
https://podcasts.apple.com/us/podcast/the-great-roll-your-own-crypto-debate-feat-filippo-valsorda/id1578405214?i=1000530617719
WhatsApp End-to-End Encrypted Backups: https://blog.whatsapp.com/end-to-end-encrypted-backups-on-whatsapp
Roll your own and Telegram: https://mtpsym.github.io/

Transcript: https://beta-share.descript.com/view/u3VFzjvqrql

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)

Get the future of podcasts.