dwyte / cipher-chat Goto Github PK
View Code? Open in Web Editor NEWE2E encrypted messaging app built with MERN Stack
E2E encrypted messaging app built with MERN Stack
What is the license for this project? is it open source?
Please describe step by step how to run application and also all the dependencies to be installed.
The app lags due to large amounts of spam and user activity. other than that great app and i will definitely be glad to help work on this.
Hey it looks like you have a client collision problem. For example:
Client1 registers with
username: user1
Password: atotallygoodpassword
Client2 registers with
username: user
Password: 1atotallygoodpassword
That being said, here's some feedback on the overall security:
You need to bcrypt, Argon2, or PBKDF2 the passwords for auth. SHA256 is not sufficient
You're using the hash of the password, basically, to seed the private key generation. There is not enough entropy there, and you're likely to get very poorly distributed private keys
The passphrase should be used to encrypt the private key, not generate it. Use PBKDF2 to stretch the passphrase to an appropriate length
RSA 1024 is not large enough anymore. I'd skip RSA altogether. No mention of padding schemes or anything. At the very least, I'd switch to a hybrid scheme with AES doing the "bulk" session encryption. But ideally you'd use a scheme with better forward secrecy.
from u/nodeent on reddit
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.