How do messengers, like signal or XMPP-omemo messengers, store their messages? Since the session key is only valid for the current session, how can such extensions like MAM (message archiving on XMPP server) or storing the messages encrypted on the disk work? Futher, you often want plausible deniability with "malleable encryption" and publishing your MAC-Keys. If this happens, how can you be sure that integrity and authentication is still valid?

  • they can store messages using different mechanisms than used to transport messages. – dandavis Dec 9 '19 at 22:43
  • Is still perfect forward secrecy with those mechanisms achieved? – user674907 Dec 10 '19 at 11:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.