lurch / libomemo: 12-byte IVs patch

[Neustradamus]

Hello @AOSC-Dev,

Here:

• https://github.com/AOSC-Dev/aosc-os-abbs/tree/stable/extra-web/lurch

Can you add the missing 12-byte IVs patch:

• 12-byte IVs (#24) gkdr/libomemo#27

Explanation:

• 12 byte IV for outgoing messages gkdr/libomemo#24

Thanks in advance.

[Fearyncess]

XEP doesn't recommend use 12-bytes IV.
xsf/xeps#894 (comment)
xsf/xeps#903

[Neustradamus]

@Fearyncess: The upstream is now good like all other OMEMO XMPP clients.
Please update it to libomemo 0.7.0.

Can you reopen this ticket, close only when it will be good?

Thanks in advance.

[Fearyncess]

AOSC doesn't have libomemo. It only have lurch. The lurch isn't updated. And more, the XMPP clients almost can be compatible with 16bytes IV, except chatsecure. I think it needn't to change this for only chatsecure, even the 12bytes IV may has the security problem. 获取 Outlook for Android<https://aka.ms/ghei36>

…

________________________________ From: Neustradamus <notifications@github.com> Sent: Saturday, January 2, 2021 6:36:20 AM To: AOSC-Dev/aosc-os-abbs <aosc-os-abbs@noreply.github.com> Cc: fearyncess <fsf@live.com>; Mention <mention@noreply.github.com> Subject: Re: [AOSC-Dev/aosc-os-abbs] lurch / libomemo: 12-byte IVs patch (#2568) @Fearyncess<https://github.com/fearyncess>: The upstream is now good like all other OMEMO XMPP clients. Please update it to libomemo 0.7.0. Can you reopen this ticket, close only when it will be good? Thanks in advance. ― You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<#2568 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AMXLODR4PKIMYMDFZBCJWPDSXZE6JANCNFSM4UFWOXQQ>.

[Neustradamus]

@Fearyncess: Thanks for your comment :)

ChatSecure is good, there is a problem with Monal.
Please read all for explanation: gkdr/libomemo#27
The problem is that there was not a XEP-0384 0.3.1 before 0.4.0 with this.
All clients send now with good 12-byte IV.

It is not possible to have separate libs like Debian for example?

At the same time, I have requested a 0.7.0 lurch build.

PS: You can always create a patch to have a perfect lurch because without, like currently, there is an incompatibility with other lurch and other clients.

[Neustradamus]

@Fearyncess: Any news?
Thanks in advance.