[General] TokTok group chat key agreement: How is Done (if is done)?

[GDR!]

Dimitrios,

Have you read the spec? It's pretty clear on that topic. There doesn't
seem to be a shared group key, instead the messages are being forwarded
using connections between friends. 

I don't think there's need for a shared key - there's no server
operator to protect from, unlike XMPP or Signal. The only nodes having
access to the message are the members of group chat, so transport
encryption is enough.

https://toktok.ltd/spec.html#group

PS. Note that I'm not a toxcore developer so please verify my claims by
reading the documentation and source code yourself.

On Mon, 1 Oct 2018 21:34:18 +0300
pcmagas <pcmagas at disroot.org> wrote:

> Whilst I was reading the TokTok protocol specification as part of my
> master thesis, I was wondering how actually group chat is handled, I
> mean most applications either agree on a common key via gropup key
> agreement protocols or via sending keys directly on top of pairwize
> encrypted channels.
> 
> As fas as I understood for the TokTok protocol in 2-party
> communications an Eliptic curve group chat protocol is done in order
> to create a XSalsa20 symmetric key, but on the group chats how is
> done, what keys are used in order for the participants to communicate
> to each other?
> 
> 
> Your sincerelly,
> 
> Dimitrios Desyllas
> 
> 
> _______________________________________________
> General mailing list
> General at lists.tox.chat
> https://lists.tox.chat/listinfo/general