Off-The-Record Whisper

Asmongold react to gov. monitoring Wow

Off-The-Record Whisper or OTRWhisper is a Wow AddOn to provide a (poorly) secure end-to-end encryption on in-game whisper chat messages.

But Why?

This YT video, privacy, RP, …

Features

Off-The-Record communication (Forward secrecy & Deniable authentication)
Block all non-OTR incoming whispers
User only friendlist as OTR

Limitations

The 'whispers' are limited to those from players (no battle.net) who are on the same (connected) realm.

⚠️ WARNING

This current state is insecure as this is just a PoC!

Just for fun, the asymmetric keys are done using Deffie Hellman key exchange with prime 1522605027922533360535618378132637429718068114961380688657908494580122963258952897654000350692006139 and generator 2. This key exchange is done at every message. The random privkey generator is only using 100 bit keys (lua lag frame, need spread)

Key deriviation is using md5⚠ ️but atleast its pure lua xD (TODO: sha256??)

The symmetric encryption for message content is done by a very basic CBC block cypher using only a single XOR operation 😅