Skip to content

Detect identical identitiy keys

Bastien Le Querrec requested to merge fix_self_session into master

Created by: pR0Ps

Instead of checking the phone number, just check the identity in the key exchange the other end sends back and invalidate the exchange if it's the same.

Since the identity key is 33 bytes = 264 bits of entropy, the odds that two people will have the same keys are miniscule.

Still though, I'm not convinced this is the right way to do this.

Merge request reports