🏠
Author: str4d.xyz (did:plc:bvdrfwiamgi5leqs63q2duro)

Collections

Record🤔

uri:
"at://did:plc:bvdrfwiamgi5leqs63q2duro/app.bsky.feed.post/3klulrmdrpq2y"
cid:
"bafyreid7ypy4v24ch4avkwuhvdtnbit4e2zmiczyj5fp2kqjj546ag4r7i"
value:
text:
"Signal is deploying ristretto255 as part of their usernames feature! 🔐

They appear to be using a Pedersen hash over the ristretto255 group, along with a Sigma/Schnorr Proof-of-Knowledge of its correctness, to hide usernames from the Signal servers."
$type:
"app.bsky.feed.post"
embed:
$type:
"app.bsky.embed.recordWithMedia"
media:
$type:
"app.bsky.embed.images"
images:
  • alt:
    "Screenshot from the quoted article:
    
    "To avoid storing even those usernames, Signal is also using a cryptographic function called a Ristretto hash, which allows it to instead store a list of unique strings of characters that encode those handles.""
    image:
    View blob content
    $type:
    "blob"
    mimeType:
    "image/jpeg"
    size:
    213809
    aspectRatio:
    width:
    671
    height:
    211
  • alt:
    "Screenshot of the libsignal source code, showing how the username proof is created."
    image:
    View blob content
    $type:
    "blob"
    mimeType:
    "image/jpeg"
    size:
    452582
    aspectRatio:
    width:
    1258
    height:
    594
  • alt:
    "Screenshot of the libsignal source code, showing how the Pedersen hash of the username is constructed, and the corresponding inputs are prepared for the proof."
    image:
    View blob content
    $type:
    "blob"
    mimeType:
    "image/jpeg"
    size:
    345701
    aspectRatio:
    width:
    905
    height:
    896
record:
$type:
"app.bsky.embed.record"
record:
cid:
"bafyreid3ioa4n3c6taxljaqdwcbjdoj4ryxqkssvyzqxyhcgviztsw72hq"
langs:
  • "en"
createdAt:
"2024-02-20T18:32:35.575Z"