zlacker

There's a lot more than just crypto. Its much more common for systems to fail in the supporting code then it is for the crypto to be wrong. So first step is probably learn reverse engineering and verify the crypto is being used correctly.

Then after that get a phd in cryptography.

>>bawolf+(OP)
The source code is available.

>>colord+W7
Fair enough. The point still stands you should do normal source code auditing before worrying about the crypto aspects.

>>colord+W7
Great. So now, you need a Software Engineering degree AND a cryptography PhD

>>colord+W7
Ugh...now I have to get a phd in "source code" too??

>>colord+W7
Unless the build is reproducible it would be smart for a paranoid person to use the published source code only as a comparison with the decompiled app.

>>sadfkl+6F
The build is reproducible: https://github.com/signalapp/Signal-Android/blob/master/Repr...