Skip to content

v2.4.0 - privacy, safer pairing and reliability

Choose a tag to compare

View all tags
@JelenXP JelenXP released this 30 Jul 16:31
v2.4.0
c0c779f

[important]

CryptoChat 2.4.0 — stronger privacy, safer pairing, and a large batch of reliability and security fixes.

⚠️ A new pairing needs both phones on 2.4.0. The spoken verification code (SAS) is now longer, so a phone on 2.4.0 and a phone on an older version would show codes that don't line up when you set up a NEW contact. Existing conversations are unaffected and keep working whichever phone updates first.

Privacy

  • Photo and file sizes are hidden from the server — media is padded before sending, so the relay can no longer tell how big a photo or file is (it already couldn't see the content).
  • Longer verification code (SAS) — the code you read aloud when pairing went from 48 to 64 bits, making a man-in-the-middle attack far harder.
  • Bug reports no longer leak network metadata — IP addresses and Tor relay fingerprints are stripped from any diagnostics you choose to send.

Security

  • The key-change block now covers every send path — if a verified contact's security code changes, reactions, retry, delete-for-everyone and media are all paused (not just the send button) until you re-verify.
  • Backup password must be at least 8 characters.

Reliability (highlights)

  • A message that fails to save durably is no longer reported as delivered, so it can't be silently lost after the server drops it.
  • A reaction that fails to send rolls back locally instead of showing as sent forever.
  • Peer version/capability tracking can no longer be frozen or downgraded by a replayed or clock-skewed message.
  • The relay resists memory-exhaustion and slow-connection (slowloris) flooding far better.
  • Plus many smaller fixes across message handling, storage, notifications, the app lock, and the build.

Other

  • Configurable auto-lock delay in Settings (immediately / 10s / 30s / 1min / 5min).
  • Full-screen photos open instantly, animate in-app, and no longer appear before the app lock.
  • Assorted scroll and tap fixes across several screens.

Update one phone at a time for existing chats; update both to pair a new contact.

Assets 3
Loading