raed667 / cryptofire-chat

Encrypted chat app using firebase and webcrypto api

Hi! My name is Raed, and I do computer stuff ✨

You can find my 🌐 website, and my 👔 LinkedIn.

Languages and Tools:

cryptofire-chat's Issues

Better room experience?

Add the following features to make the chat room experience more natural and "feature complete":

• Host/Guest presence indicator (UI)
• Idle status: when a Host/Guest is not active for {$x} amount of time, mark them as 'Away'
• Guest join, notification to host
• Host/Guest leave notification
• Better identity change message and notification (+ accept / leave promot? )

Ideas / comments / pull-requests are always welcome!

Add group chat feature

This issue is for the thoughts / discussion about how to address end-to-end encryption for a group chat.

My initial thought is to encrypt the message {$n} times (n being the number of people in the chat room) then send it all once as a JSON array like this :

[
  {'userId' : 'encryptedMessage'},
  {'userId2' : 'encryptedMessage2'},
  ...
]

I can see 2 issues with this approach:

• Large chat rooms will become very slow.
• We will need to keep a "read" flag for every user and every message in order to delete the message once transmitted

Ideas / comments / pull-requests are always welcome!

Perfect Forward Secrecy? Diffie-Hellman Ephemeral Key Exchange?

I'm new to crypto, but if I understand as well - apps like Signal never uses same keypair to encrypt more than one message. Could this be achieved by web-crypto implementation? Could you help me with "upgrading" your solution? Also - is it safe for Forward Secrecy to consider user's password (from account) as base for keypair?

I'm trying to re-engineer your app into web-based Signal-like solution. Please help me

[Crypto] Add message authentication

Add Encrypt-then-MAC using WEBCRYPTO AES-CMAC implementation [0].

Sign and verify messages using the same key used for AES-CBC 'sessionKey'

Edit 1:

Or just change from CBC to GCM [1]

[0] https://github.com/diafygi/webcrypto-examples#aes-cmac
[1] https://github.com/diafygi/webcrypto-examples#aes-gcm

Google Analytics in the Index ?

Hi,
How about Google Analytics tracking on the Index :p
Can we replace it by something else ? Piwik ?
Salutations amicales.

Add better UI error handling

Remove all the alert calls in favor of something more UI friendly.