Looking for a way to encrypt peer2peer in irc reddit / irc ---------------------------------------------------------------------- zwarag · 2014-12-01 09:05 So I am quite new to all this IRC stuff. I set up an IRC-Server and have ssl encryption working. Now I would like to know if there is a way to encrypt messages p2p as just encrypting with ssl is not enought imo. PGP would be pretty cool. ---------------------------------------------------------------------- beleuchtung · 2014-12-01 10:03 You might want to look into [Off-the-Record Messaging (OTR)](https://en.wikipedia.org/wiki/Off-the-Record_Messaging). I don't know much about it either though. ---------------------------------------------------------------------- autowikibot · 2014-12-01 10:03 ##### ###### #### [**Off-the-Record Messaging**](https://en.wikipedia.org/wiki/Off-the- Record%20Messaging): [](#sfw) --- > >__Off-the-Record Messaging__ (__OTR__) is a [cryptographic protocol](https://en.wikipedia.org/wiki/Cryptographic_protocol) that provides encryption for [instant messaging](https://en.wikipedia.org/wiki/Instant_messaging) conversations. OTR uses a combination of [AES](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) [symmetric-key algorithm](https://en.wikipedia.org/wiki/Symmetric- key_algorithm) with 128 bits key length, the [Diffie–Hellman key excha nge](https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange ) with 1536 bits group size, and the [SHA-1](https://en.wikipedia.org/wiki/SHA-1) hash function. In addition to [authentication](https://en.wikipedia.org/wiki/Authentication) and [encryption](https://en.wikipedia.org/wiki/Encryption), OTR provides [perfect forward secrecy](https://en.wikipedia.org/wiki/Perfect_forward_secrecy) and malleable encryption. >The primary motivation behind the protocol was providing [deniable authentication](https://en.wikipedia.org/wiki/Deniable_authentication) for the conversation participants while keeping conversations confidential, like a private conversation in real life, or [off the re cord](https://en.wikipedia.org/wiki/Journalism_sourcing#Using_confiden tial_information) in [journalism sourcing](https://en.wikipedia.org/wiki/Journalism_sourcing). This is in contrast with other cryptography tools that produce output which can be later used as a verifiable record of the communication event and the identities of the participants. The initial introductory paper was named "*Off-the-Record Communication, or, Why Not To Use [PGP](https://en.wikipedia.org/wiki/Pretty_Good_Privacy)*". >The OTR protocol was designed by cryptographers [Ian Goldberg](https://en.wikipedia.org/wiki/Ian_Goldberg) and [Nikita Borisov](https://en.wikipedia.org/wiki/Nikita_Borisov). They provide a client [library](https://en.wikipedia.org/wiki/Library_(computer_science\)) to facilitate support for instant messaging client developers who want to implement the protocol. A [Pidgin](https://en.wikipedia.org/wiki/Pidgin_(software\)) and [Kopete](https://en.wikipedia.org/wiki/Kopete) plugin exists that allows OTR to be used over any IM protocol supported by Pidgin or Kopete, offering an [auto- detection](https://en.wikipedia.org/wiki/Opportunistic_encryption) feature that starts the OTR session with the buddies that have it enabled, without interfering with regular, unencrypted conversations. >==== >[**Image**](https://i.imgur.com/cGtbRCO.png) [^(i)](https://commons.wikimedia.org/wiki/File:Off-The- Record_authentication_dialog..png) --- ^Interesting: [^BitlBee](https://en.wikipedia.org/wiki/BitlBee) ^| [^Nikita ^Borisov](https://en.wikipedia.org/wiki/Nikita_Borisov) ^| [^Centre ^for ^Applied ^Cryptographic ^Research](https://en.wikipedia. org/wiki/Centre_for_Applied_Cryptographic_Research) ^| [^Deniable ^aut hentication](https://en.wikipedia.org/wiki/Deniable_authentication) ^Parent ^commenter ^can [^toggle ^NSFW](/message/compose?to=autowikibot&subject=AutoWikibot NSFW toggle&message=%2Btoggle-nsfw+cmhse77) ^or[](#or) [^delete](/message/compose?to=autowikibot&subject=AutoWikibot Deletion&message=%2Bdelete+cmhse77)^. ^Will ^also ^delete ^on ^comment ^score ^of ^-1 ^or ^less. ^| [^(FAQs)](http://www.np.reddit.com/r/autowikibot/wiki/index) ^| [^Mods ](http://www.np.reddit.com/r/autowikibot/comments/1x013o/for_moderator s_switches_commands_and_css/) ^| [^Magic ^Words](http://www.np.reddit. com/r/autowikibot/comments/1ux484/ask_wikibot/) ---------------------------------------------------------------------- zwarag · 2014-12-01 11:09 thanks mate, gonna dig into that. ---------------------------------------------------------------------- aedriolo · 2014-12-01 17:24 you need [blowfish encryption](https://github.com/flakes/mirc_fish_10). it's pretty much the standard nowadays ---------------------------------------------------------------------- CannedDeath · 2014-12-01 21:01 Blowfish has been rendered obsolete by AES for years and fish isn't as cryptographically sound or widely available as OTR ---------------------------------------------------------------------- aedriolo · 2014-12-01 22:09 Still the solution for irc ---------------------------------------------------------------------- D4pp3rD4n · 2014-12-20 05:16 a bit late on the response, but [Pidgin with OTR](https://securityinabox.org/pidgin_main) might be your ticket