For the first article in the new post serie about "let's pick apart the new kickstarted secure decentralized software of the week", I chose SafeChat, which started just two days ago. Yes, I like to hunt young preys :p
A note, before we begin: this analysis is based on publicly available information at the time of writing. If the authors of the project give more information, I can update the article to match it. The goal is to assert, with what little we know about the project, if it is a good idea to give money to this project. I will only concentrate on the technical parts, not on the team itself (even if, for some of those projects, I think they're idiots running with scissors in hand).
What is SafeChat?
Open source encryption based instant messaging software
SafeChat is a brilliantly simple deeply secure instant messaging system for mobile phones and computers
SafeChat is an instant messaging software designed by Commercial Free. There is no real indication about who really works there, and where the company is based, except for David Crawford, who created the Kickstarter project and is based in Montreal in Canada.
Note that SafeChat is only a small part of the services they want to provide. Commercial Free will also have plans including an email encryption service (no info about that one) and cloud storage.
Available technical information
There is not much to see. They say they are almost done with the core code, but the only thing they present is some videos of what the interaction with the app could be.
Apparently, it is an instant messaging application with Android and iOS applications and some server components. Session keys are generated for the communication between users. They will manage the server component, and the service will be available with a yearly subscription.
It seems they don't want to release much information about the cryptographic components they use. They talk about "peer to peer encryption" (lol) which is open source and standard. If anyone understands what algorithm or protocol they refer to, please enlighten me. They also say they will mix in some proprietary code (so much for open source).
I especially like the part about NIST. They mock NIST, telling that they have thrown "all standard encryption commonly used today out the window". I am still wondering what "open source and standard peer to peer encryption" means.
Network protocol
The iOS and Android applications will apparently provide direct communication between users. I guess that from their emphasis on P2P, but also from the price they claim: $10 per user per year would be a bit small to pay for server costs if they had to route all the messages.
P2P communication between phones is technically feasible. They would probably need to implement some TCP hole punching in their solution, but it is doable.
Looking athe the video, it seems there is a key agreement before communication. I do not really like the interaction they chose to represent key agreement (with the colors and the smileys). There are too many different states, while people only need to know "are we safe now?"
I am not sure if there is a presence protocol. The video does not really show it. If there is no presence system, are messages stored until the person is online? Stored on the server or on the client? Does the server notify the client when the person becomes available?
Cryptography
By bringing together existing theories of cryptography and some proprietary code to bind them together, we are making a deeply encrypted private chatting system that continues to evolve as the field of cryptography does.
Yup, I really feel safe now.
Joke aside, here is what we can guess:
- session keys for the communication between users. I don't know if it is a Diffie-Hellman based protocol
- no rekeying, ie no perfect forward secrecy
- no info on message authentication or integrity verification
- I am not sure if the app generates some asymmetric keys for authentication, if there is trust on first use, or whatever else
- the server might not be very safe, because they really, really want to rely on German laws to protect it. If the crypto was fully managed client side, they would not care about servers taken down, they could just pop another somewhere.
There could be a PKI managed by Commercial Free. That would be consistent with the subscription model (short lived certificates is an easy way of limiting the usage of a service).
Threat model
Now, we can draw the rough threat model they are using:
What we want to do is make it impractical for an organization to snoop your communications as it would become very hard to find them and then harder still to decrypt them.
Pro tip: a system with a central server does not make it hard to find communications.
Attacker types:
- phone thief: I don't think they use client side encryption for credentials and logs. Phone thiefs and forensics engineers won't have a real problem there
- network operator: they can disrupt the communication, but will probably not be able to decrypt or do MITM (I really think the server is managing the authentication part, along with setting up the communication)
- law enforcement: they want to rely on German laws to protect their system. At the same time, they do not say they will move out to Germany to operate the system. If they stay in Canada, that changes the legal part. If they use a certificate authority, protecting the server will be useless, because they can just ask the key at the company.
- server attacker: the server will probably be Windows based (see the core developer's skills). Since that design is really server centric, taking down the server might take down the whole service. And attacking it will reveal lots of interesting metadata, and probably offer MITM capabilities
- nation state: please, stop joking...
So...
Really, nothing interesting here. I do not see any reason to give money to this project: there is nothing new, it does not solve big problems like anonymous messaging, or staying reliable if one server is down.  Nowadays, if you create a cryptographic protocol with client side encryption, you must make sure that your security is based on the client, not the server.
Alternatives to this service:
- Apple iMessage: closed source, only for iOS, encrypted message, MITM is permitted for Apple by the protocol, but "we have not architected the server for this". Already available.
- Text Secure by OpenWhisperSystems: open source, available for iOS and Android, uses SMS as a transport protocol, uses OTR (Off the Record protocol) to protect the communication, no server component. Choose Text Secure! It is really easy to use, and OTR is well integrated in the interface.


|
|
|
The Constitution Project at FoV House
|
|
Highlights of March 2018:
- As part of The Constitution Project at FoV, a kickoff workshop was organised on March 17th 2018 where people from diverse disciplines such as law, design, technology, social sciences, media and government participated in interdisciplinary teams using FoV’s design methodology to create demonstrable prototypes such as toolkits, online platforms, and games, to facilitate discussion, dialogue and actively engage with the Constitution.
- Anirudh conducted a Rubbish! game session on March 21st 2018 for members of HasiruDala, an organization of waste workers that works towards improving the livelihood and quality of life of waste pickers by providing total waste management services through them to bulk generators of waste.
- Meeting of the Fields of View Board was conducted on March 24th 2018 to discuss organizational activities.
- Radio Austria visited FoV on March 30th to conduct an interview about Fields of View’s work.
Highlights of April 2018:
- Vaibhav was in Mumbai to present FoV’s Rubbish! game on solid waste management in Bangalore at the Xynteo Exchange Marketplace 2018, a platform for galvanising leaders and catalysing ideas; and fusing them into new projects by designing and delivering collaborations across different sectors and industries.
- A workshop with government officials managing land, water, and waste in Chennai was held on April 24th 2018 as part of the project ‘Platform for integrated governance in Chennai’, a collaboration between Fields of View, Okapi India, IIT-Madras, and Tamil Nadu State Land Use Board. FoV’s efforts in this project are supported by Sir Dorabji Tata Trust.
- A workshop was held with civil society groups in Chennai on April 25th 2018 to understand their perspectives related to waste, water, and land-use issues in the city as part of the project ‘Platform for integrated governance in Chennai’, a collaboration between Fields of View, Okapi India, IIT-Madras, and Tamil Nadu State Land Use Board. FoV’s efforts in this project are supported by Sir Dorabji Tata Trust.
- Shambhavi and Anirudh attended a roundtable meeting on “Games for Change” on April 26th 2018 that ComMutiny - The Youth Collective and Srishti Institute of Art and Design school organized in Bangalore to share experiences on how games can be used to engage the youth in citizenship education.
Highlights of May 2018:
- Harsha and Harish participated in a panel discussion on India’s transition to Electric Vehicles organised by Brookings Indiaon May 7th 2018 where risks, policy trade-offs, infrastructure readiness, supply-demand issues and the institutional framework for such a transition to happen successfully were discussed.
- On May 8th 2018, Bharath M. Palavalli was elected to the prestigious Ashoka Fellowship for his work in nurturing Fields of View. Founded by Bill Drayton in 1980, today Ashoka is the world’s largest network of leading social entrepreneurs. Impacting millions of people and communities through their work, Ashoka Fellows include people like Nobel Laureates Kailash Satyarthi (Bachpan Bachao Andolan), Muhammad Yunus (Grameen Bank), and Magsaysay awardee Anshu Gupta (Goonj), among several others.
- Sruthi and Anirudh were at Azim Premji University to conduct a Rubbish! game session on May 8th 2018 for students from Masters' program in Development studies.
- Bharath participated in a panel discussion curated by Ashoka in partnership with Twitter India on May 10th 2018 as part of twitter conversations for Karnataka state legislative assembly elections. The panel discussion was also shared as a live feed by Twitter India and Ashoka.
- Shambhavi and Anirudh conducted a City Game session on May 14th 2018 for children from different parts of India as a part of the course for the Genwise summer school programme.
- Bharath, Harsha and Anirudh attended a meeting with the BMTC Managing Director, Mr.Ponnuraj on May 17th 2018 to discuss about existing problems in BMTC regarding processes adopted for scheduling, routing and fare structuring. Plans and various strategies concerning the adoption of electric mobility for public transportation in Bangalore were also discussed.
- As part of different events conducted during the visit of The Netherlands Trade Mission to India, which included panel discussions on Smart Cities and High technologies, Indo-Dutch startup initiative and Indo-Dutch project exhibition:
a. Bharath was invited for a tête-à-tête with the Dutch Trade Minister, Mrs. Sigrid Kaag for a discussion on the challenges of urbanisation and how city councils and citizens can participate in addressing these challenges. He was also the moderator for the high delegation panel on Smart Cities which also included the Dutch trade Minister and her emissaries.
b. Harish and Harsha attended the Indo-Dutch startup initiative meant to foster business cooperation and collaboration between Indian and Dutch startups.
c. Shambhavi and Anirudh presented the work done under the ‘Joint Road Forward’ project on mobility planning and infrastructure in collaboration with TU-Delft, The Netherlands.
- FoV conducted the City Game session on May 28th 2018 for more than 300 school girls from different parts of Karnataka as part of the Chetana programme, organised by the Dept. of IT/BT, Govt. of Karnataka in Mangalore.
- The FoV team
|
|
|
|