zlacker

>>pera+(OP)
Honest question for those in the know: If I wanted to run my own personal “analysis” to verify the security of Signal, where would I start? Is it even possible? Just curious if there was a way to “know” rather than “trust”.

>>aeroph+Z4
The first step would probably involve getting a PhD in cryptography...

>>angott+r9
There's a lot more than just crypto. Its much more common for systems to fail in the supporting code then it is for the crypto to be wrong. So first step is probably learn reverse engineering and verify the crypto is being used correctly.

Then after that get a phd in cryptography.

>>bawolf+Cd
The source code is available.

>>colord+yl
Great. So now, you need a Software Engineering degree AND a cryptography PhD