Comment on Surespot app - free and open source encryption for everyoneparentComments−surespot13yPerhaps you can get a second impression-details of threat model- https://www.surespot.me/documents/threat.htmldetails of how surespot works including crypto- https://www.surespot.me/documents/how_surespot_works.htmlyou can always review the code on GitHub- https://github.com/surespot/android−ig113yYou should have a look at:https://www.owasp.org/index.php/Threat_Risk_ModelingTo understand the standard approaches to threat modelling.It should be trivial for someone to look at the documentation and quickly answer basic security questions like "Does it defend against replay attacks ?" and "Does it leak message size ?"
Comments
Perhaps you can get a second impression-
details of threat model- https://www.surespot.me/documents/threat.html
details of how surespot works including crypto- https://www.surespot.me/documents/how_surespot_works.html
you can always review the code on GitHub- https://github.com/surespot/android
You should have a look at:
https://www.owasp.org/index.php/Threat_Risk_Modeling
To understand the standard approaches to threat modelling.
It should be trivial for someone to look at the documentation and quickly answer basic security questions like "Does it defend against replay attacks ?" and "Does it leak message size ?"