Practically-exploitable Cryptographic Vulnerabilities in Matrix
summary
Researchers demonstrate several practical exploits against Matrix and Element that let a malicious Home Server eavesdrop, impersonate accounts, and decrypt server-side backups. Attacks chain from forged group membership and spoofed device lists, to a SAS verification confusion between device identifiers and user keys, to a key‑request implementation bug and backup key substitution that yield a complete break of confidentiality and authentication. Multiple attacks include proof-of-concept code and most have been mitigated, while one IV integrity flaw remains a theoretical vulnerability.
AI-written summary · about
chapters (4)
- 0:00Introduction to Matrix
- 4:24Cryptography in Matrix
- 15:12Vulnerability analysis
- 30:02Lessons and future research
related talks
14mPractical Attacks on a Decentralized Secure Messenger Session
42mDesigning Matrix: A Global Decentralised End-to-End Encrypted..
46mMatrix Cryptographic Key Infrastructure
36mSmall Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
17mA Beginners Guide to Security Exploits in Action
44mInvisible Crypto
40mCryptanalysis II
01h 09mThe Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ...