Secure Mobile Messaging

Secure Mobile Messaging: A birds eye view on an architecture.

The results are based on an analysis of the protocol used by Threema: http://blog.jan-ahrens.eu/2014/03/22/threema-protocol-analysis.html. For the sake of simplification, it is claimed that SSL is used as a transport layer security protocol. In reality Threema uses its own protocol to achieve this.

This talk was originally presented at the X Sessions Mobile in Hamburg on 27 March 2014.

All trademarks belong to their respective owners.

Transcript

1. Secure ! Mobile Messaging! ! Jan Ahrens! Software Engineer! XING API!
2. Secure ! Mobile Messaging! !
9. ! always online?! ! ! ! !
12. ! whom to talk to?! ! ! ! !
16. ! app not running?! ! ! ! !
19. Secure ! Mobile Messaging! !
21. SSL! SSL! SSL! HTTPS!
23. threema.ch  
24. threema.ch  
33. NaCl („salt“)! ! •  Alternative to other public-key crpytosystems like RSA! !
34. NaCl („salt“)! ! •  Alternative to other public-key crpytosystems like RSA! •  Easy and safe to use! !
35. NaCl („salt“)! ! •  Alternative to other public-key crpytosystems like RSA! •  Easy and safe to use! ! •  Encryption and integrity!
36. NaCl („salt“)! ! •  Alternative to other public-key crpytosystems like RSA! •  Easy and safe to use! ! •  Encryption and integrity! ! •  Fast!
37. Secure mobile messaging! is not hard to implement! ! ! ! Can this be done! with the XING API?!
38. blog.jan-­‐ahrens.eu   threema.ch  
39. blog.jan-­‐ahrens.eu   Thanks for your attention.! threema.ch