Implement encryption

[Haider8]

Right now there is no encryption on messages. A feature has to be implemented which will make the messages encrypted maximizing the privacy and security of the users.

[csaranbalaji]

I would like to work on this issue. The proposed solution for this is to generate a key on initiating the chat and store the key in a file and use it for encryption and decryption.

Referred this article : https://nitratine.net/blog/post/encryption-and-decryption-in-python/

Let me know if I could proceed.

[Haider8]

@csaranbalaji Thanks for proposing this solution. Looks good. Go ahead with this issue 👍

If you like this project, please star the repository to support us 🥇

[csaranbalaji]

We need to send the encryption key first to the other end in this case. Is it fine to communicate the encryption key or we can just have a static key?

[iamareebjamal]

Depends if you want end to end encryption or encryption at rest. End to end encryption is more secure but also more complex. You need to use secure key exchange algorithms like Diffie-Hellman or something better if you choose end to end encryption.

[csaranbalaji]

ok then, will implement without end to end encryption. We can create a new issue to implement end to end encryption. Shall I proceed with a static key?

[iamareebjamal]

How will the static key be shared? If the key is hardcoded, then anyone can read the message, making security obsolete

[csaranbalaji]

Ok. Will try to implement end to end encryption using Diffie-Hellman or something better.

[RJ722]

I found these guides to be really helpful:

• https://www.hivemq.com/blog/mqtt-security-fundamentals-payload-encryption/
• https://www.hivemq.com/blog/mqtt-security-fundamentals-tls-ssl/

[Haider8]

@csaranbalaji I think we can share the keys using our API.

[iamareebjamal]

@Haider8 And how will you encrypt the keys? Sharing keys with API is equivalent to transmitting messages in plain text AFAIK