Skype’s Innermost Security Layers Claimed To Be Reverse-Engineered

veritas_libertas

Interesting article linked to from Bruce Schneir's blog.

Schneier on Security: Skype's Cryptography Reverse-Engineered

Skype's Cryptography Reverse-Engineered Someone claims to have reverse-engineered Skype's proprietary encryption protocols, and has published pieces of it.
If the crypto is good, this is less of a big deal than you might think. Good cryptography is designed to be made public; it's only for business reasons that it remains secret.

Skype’s Innermost Security Layers Claimed To Be Reverse-Engineered

JDMurray

So the "key derivation algorithm" is known, but not (yet) the actual obfucation algorithm that the key is applied to. I do wonder what three-letter-agencies already know both.