Quaternion icon indicating copy to clipboard operation
Quaternion copied to clipboard

Support E2E encryption

Open maralorn opened this issue 9 years ago • 17 comments

maralorn avatar Oct 01 '16 21:10 maralorn

The implementer's guide for E2E is now pretty much complete, and libolm and megolm is good to go. We'll hear initial feedback from the audit on Tuesday (Oct 4), but we're not expecting any showstoppers to emerge from it (hopefully!)

https://docs.google.com/document/d/17zpoQYFuE-vU5aiVpGxJi-KiMqvULP4RFMZnzyr3i6U/edit#

ara4n avatar Oct 01 '16 21:10 ara4n

I started a BountySource bounty for this.

ghost avatar Dec 21 '16 09:12 ghost

There has been some work in libqmatrixclient: https://github.com/QMatrixClient/libqmatrixclient/issues/95

ptman avatar Feb 28 '19 11:02 ptman

I literally cannot use Quaternion until this is implemented, since all of my personal conversations are encrypted. This is a shame; it otherwise looks like an excellent client.

ghost avatar Nov 30 '19 13:11 ghost

E2EE is not there yet, it was my GSoC project. TLDR: receiving is kinda there, sending and other stuff are not ready yet. You also could try a reverse proxy daemon called pantalaimon to use E2EE with any client if it's urgent for you. Since it's a spare-time project, pull requests are more than welcome. Really hope we could make you happy soon :)

a-andreyev avatar Dec 02 '19 14:12 a-andreyev

Quaternion does not work with pantalaimon unfortunately, because it "detects" rooms as E2EE and refuses to send messages, even with pantalaimon proxying them. That happened a while ago, not sure about now.

lbeltrame avatar Jan 03 '20 21:01 lbeltrame

Hello, is this going to be added any time soon?

ddobrev avatar Jan 29 '20 22:01 ddobrev

Would it be possible to somehow disable this whole broken e2ee in quaterion so it does not interfere with pantalaimon?

Midek avatar Mar 24 '20 12:03 Midek

Would it be possible to somehow disable this whole broken e2ee in quaterion so it does not interfere with pantalaimon?

You could track the pantalaimon interoperability issue status in the https://github.com/quotient-im/Quaternion/issues/663

a-andreyev avatar Mar 24 '20 16:03 a-andreyev

See #663 on fixing the situation with Pantalaimon. E2EE in Quaternion is still work in progress, and will be for a bit of time yet (it's moving now, albeit slowly).

KitsuneRal avatar Mar 24 '20 17:03 KitsuneRal

wen

goodboy avatar Jan 03 '21 23:01 goodboy

Has there been any updates on this front?

Akselmo avatar Sep 16 '21 22:09 Akselmo

There are a good news and a bad news here. Thanks to the NeoChat team, there's steady progress on the libQuotient front (see https://github.com/quotient-im/libQuotient/pull/443). Don't want to promise any timelines at the moment but there's a plan to at least partially merge this work in the next stable version of libQuotient (0.7). The bad news is that this will only enable E2EE basics in Quaternion (sending/receiving messages and minimal device approval/cross-signing UI) which should come more or less in sync with libQuotient; anything advanced (emoji-based cross-signing, backup etc.) that would make E2EE actually usable is unlikely to arrive in the nearest half a year or even a year, judging by the experience Nheko fellas went through. That's really pending on the amount of effort put into this; extra qualified hands/minds can speed it up substantially.

KitsuneRal avatar Sep 17 '21 06:09 KitsuneRal

For those craving for it - 0.0.96 beta has some basic support of E2EE (mainly along the lines described in the previous comment; also, see the libQuotient 0.7 release notes). Decrypting historical encrypted messages is down to the library support that will hopefully arrive in 0.7.2 or 0.7.3; cross-signing is not there but might be closer thanks to all the work done in NeoChat; and backups might wait until 0.0.97.

KitsuneRal avatar Apr 06 '23 15:04 KitsuneRal

Another status update for those subscribed to this issue: there are more incremental updates in 0.0.96 beta 3 thanks to switching to libQuotient 0.8. Unlike the previous beta, you can switch E2EE per-account now, at runtime. Historical messages are still not decrypted; the library support for cross-signing is in the works and hopefully will land in libQuotient 0.8.x version.

KitsuneRal avatar Jul 22 '23 09:07 KitsuneRal