[liberationtech] Encrypted SMS

[Danny O'Brien]

On Oct 7, 2010, at 12:45 AM, Graham Smith wrote:

I'm very interested in mobile technology, and I've been wondering what open source solutions exist for encrypted SMS messaging using PKI.

The only obvious project that has come to my attention in this field is called CryptoSMS[1], which is licensed under the GPL, and uses ECC for encrypting SMS messages between phones.  Key sharing is also done over SMS, directly between any two phones which wish to communicate securely.  Their recommendation is to visually compare the hash of the public key on the recipient phone to verify that it has been shared correctly.

I've not been able to find any serious review of CryptoSMS, or any other implementation of secure SMS messaging.  Would any of you helpful people be able to point me the right way, or share your thoughts?

You might also want to look at TextSecure, http://www.whispersys.com/, which is based on OTR, but with some protocol changes to fit with SMS's limited size. I've cc:'d the author of TextSecure here Moxie Marlinspike, though I suspect he may be onlist anyway.

d.


BR,

Graham


[1] http://cryptosms.org/

_______________________________________________
liberationtech mailing list
liberationtech at lists.stanford.edu<mailto:liberationtech at lists.stanford.edu>

Should you need to change your subscription options, please go to:

https://mailman.stanford.edu/mailman/listinfo/liberationtech

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20101007/d6d94b30/attachment.html>