OP16 April, 2021 - 03:00 AM(This post was last modified: 16 April, 2021 - 03:12 AM by OzPride.)
Reply
Enjoy & Leeches Will Be Reported Drop A Like !
As we all know Discord lacks privacy but is also very useful. This will fix that for you plus you can use Discord Nitro Emojis for free!
SimpleDiscordCrypt: __ Encrypts attachments, gifs, photos, messages etc, with AES-256-CBC (an equivalent to aes-256), keys are exchanged through ECDH P-52, and everything is handled through end to end encryption. Everything is auto decrypted for clients/servers you give permission to. __ Keys are compartmentalised very well: Dm keys: These are handled through the Diffie-Hellman key exchange which provides a secure connection over an unsafe medium. These keys are specific to each dm, and a different key is used on servers, etc. Group keys: This can be set to hidden or public (which auto accepts sharing to those in your server/channel), secure communication either in a specific channel or across the server. Personal key: Everyone has this, and it's different for everyone. The purpose of this is mainly convenience, it's not compartmentalised, share this with people u trust and they'd see messages across all servers/dms. Other security features: Afaik, the discord input box is replaced with its own to prevent discord keylogging the original message being typed, however i can't be certain of this, and if concerned you can disable discord's spellcheck. You can manually/periodically rotate keys __ Other utility features: It allows you to usenitro emojis for free, this isnt the purpose of this post but its worth mentioning. Custom notifications based on a specific keyword, or regex matching. Message compression, writing over 2k characters Image zooming __ I didn't make this, but I don't see many using it so I thought it'd be worth mentioning, And yes I understand it's best not to use discord, but some have to, and doing this can greatly increase security/privacy.
That's nice but AES-CBC seems to be vulnerable to a lot of stuff, and less secure than expected, which is one of the reasons why it's not supported by tls1.3. It would be cool to see it use AES-CTR or AES-GCM since they're a lot more efficient and secure in comparison (and also in the SubtleCrypto browser API)
(16 April, 2021 - 03:00 AM)InTheShadows Wrote: Show More
Enjoy & Leeches Will Be Reported Drop A Like !
As we all know Discord lacks privacy but is also very useful. This will fix that for you plus you can use Discord Nitro Emojis for free!
SimpleDiscordCrypt: __ Encrypts attachments, gifs, photos, messages etc, with AES-256-CBC (an equivalent to aes-256), keys are exchanged through ECDH P-52, and everything is handled through end to end encryption. Everything is auto decrypted for clients/servers you give permission to. __ Keys are compartmentalised very well: Dm keys: These are handled through the Diffie-Hellman key exchange which provides a secure connection over an unsafe medium. These keys are specific to each dm, and a different key is used on servers, etc. Group keys: This can be set to hidden or public (which auto accepts sharing to those in your server/channel), secure communication either in a specific channel or across the server. Personal key: Everyone has this, and it's different for everyone. The purpose of this is mainly convenience, it's not compartmentalised, share this with people u trust and they'd see messages across all servers/dms. Other security features: Afaik, the discord input box is replaced with its own to prevent discord keylogging the original message being typed, however i can't be certain of this, and if concerned you can disable discord's spellcheck. You can manually/periodically rotate keys __ Other utility features: It allows you to usenitro emojis for free, this isnt the purpose of this post but its worth mentioning. Custom notifications based on a specific keyword, or regex matching. Message compression, writing over 2k characters Image zooming __ I didn't make this, but I don't see many using it so I thought it'd be worth mentioning, And yes I understand it's best not to use discord, but some have to, and doing this can greatly increase security/privacy.