https://github.com/ferib/otrwhisper

Off-The-Record Whispers for Wow (AddOn)
https://github.com/ferib/otrwhisper

adddon classic classic-era lua retail wow

Last synced: 29 days ago
JSON representation

Off-The-Record Whispers for Wow (AddOn)

• Host: GitHub
• URL: https://github.com/ferib/otrwhisper
• Owner: ferib
• Created: 2023-06-10T21:45:28.000Z (about 3 years ago)
• Default Branch: master
• Last Pushed: 2023-06-12T20:47:34.000Z (about 3 years ago)
• Last Synced: 2025-01-18T17:35:12.681Z (over 1 year ago)
• Topics: adddon, classic, classic-era, lua, retail, wow
• Language: Lua
• Homepage:
• Size: 265 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 4
• Metadata Files:
  • Readme: readme.md

Awesome Lists containing this project

README

          
# Off-The-Record Whisper

![Asmongold react to gov. monitoring Wow](https://i.ytimg.com/vi/Ah3blDLWP-E/hq720.jpg?sqp=-oaymwEnCNAFEJQDSFryq4qpAxkIARUAAIhCGAHYAQHiAQoIGBACGAY4AUAB&rs=AOn4CLDUIKEuMYkYCJosKWuIkPqpVoO4gw)

Off-The-Record Whisper or **OTRWhisper** is a Wow AddOn to provide a _(poorly)_ secure end-to-end encryption on in-game whisper chat messages.

## But Why?

This [YT video](https://www.youtube.com/watch?v=Ah3blDLWP-E), privacy, RP, ...

## Features

- Off-The-Record communication _(Forward secrecy & Deniable authentication)_

- Block all non-OTR incoming whispers

- User only friendlist as OTR

## Limitations

The 'whispers' are limited to those from players _(no battle.net)_ who are on the same _(connected)_ realm.

## ⚠️ WARNING

This current state is **insecure** as this is just a PoC!

Just for fun, the asymmetric keys are done using Deffie Hellman key exchange with prime `1522605027922533360535618378132637429718068114961380688657908494580122963258952897654000350692006139` and generator `2`. This key exchange is done at every message. The random privkey generator is only using 100 bit keys (lua lag frame, need spread)

Key deriviation is using `md5`⚠ ️but atleast its pure lua xD (TODO: sha256??)

The symmetric encryption for message content is done by a very basic CBC block cypher using only a single XOR operation 😅