zlacker

>>Fabian+(OP)
The fact that they broke some but not all the OTR messages in the log suggests to me that their attack is not a MITM, but instead a compromise of the 1024 bit DH or CTR mode AES.

>>nullc+x9
Do you really think NSA has compromised AES-CTR? That would have to be a pretty fundamental attack, wouldn't it?

>>tptace+3e
I have little doubt they have compromised some system that reuses keys or nonces (or fails to increment the counter :)). If I were making a powerpoint to brag to my bosses, I would definitely put that on a slide.