Breaking Cryptography in the Wild: Rocket.Chat

General
1

In this thesis, we analyze the cryptography in Rocket.Chat’s end-to- end encryption protocol and uncover flaws in its current design. We show, among other things, that it provides no security if the server is actively malicious, that encrypted messages are not safe if the database is leaked, and that malicious privileged users can gain access to decrypted messages without being a room member and hijack user sessions

4 Likes