Encrypt Chat
To Encrypt ICQ/AIM chats.
AimPRO (freeware) offers incorporated “Business Grade Security” Encrypted Messaging and an HTTPS connection. It also integrates desktop sharing and offers optional collaboration services through a 3rd party, WebEX. For Windows: Download
Using Simp-Lite from Secway (for Windows only):
You are using ICQ/AIM to chat with your friends or colleagues. Did you know your messages are sent over the Internet in cleartext form?
By encrypting messages before they leave your computer to the Internet, SimpLite-ICQ/AIM prevents eavesdroppers from reading your personal ICQ/AIM conversations. As the original successor of Simp 1.0, SimpLite-ICQ/AIM benefits from state of the art algorithms to secure your messages, whilst maintaining an intuitive interface.
SimpLite will automatically configure itself to work with:
ICQ 2005 & ICQ 6, AIM 5 & AIM 6, Trillian, GAIM, Pidgen
Other: ICQ/AIM clients that support proxy can be manually configured with the following:
Direct Mode: Proxy 127.0.0.1 / port: 5190, SOCKS4 Mode: 127.0.0.1 / port: 15190
Simp-Lite for Windows: Download
Off-the-Record Messaging
Off-the-Record Messaging, commonly referred to as OTR, is a cryptographic protocol that provides strong encryption for instant messaging conversations. OTR uses a combination of the AES symmetric-key algorithm, the Diffie-Hellman key exchange, and the SHA-1 hash function. In addition to authentication and encryption, OTR provides perfect forward secrecy and deniable encryption.
The primary motivation behind the protocol was providing deniability for the conversation participants while keeping conversations confidential, like a private conversation in real life, or off the record in journalism sourcing. This is in contrast with the majority of cryptography tools where, once signed, a cryptographic signature can be proved at a later date. Hence the initial introductory paper was named “Off-the-Record Communication, or, Why Not To Use PGP“.[1]
The OTR protocol was designed by cryptographers Ian Goldberg and Nikita Borisov. They provide a client library to facilitate support for instant messaging client developers who want to implement the protocol and a special OTR-proxy for AIM, ICQ, and .Mac clients which support proxies.
Client support
Native
These clients support Off-the-Record Messaging out of the box.
- Adium (Mac OS X).
- climm (Unix-like), since (mICQ) 0.5.4.
- MCabber (Unix-like), since 0.9.4
- centerim (Unix-like), since 4.22.2
Via plug-in
The following clients require a plug-in to use Off-the-Record Messaging. Plugin support allows use of OTR with all of a client’s implemented instant messaging protocols (e.g. OSCAR, Jabber, MSN, YIM/YMSG etc.).
- Pidgin (Cross-platform), with an official plugin available from the OTR homepage [2]
- Kopete (Unix-like) with a third-party plugin [3]
- Miranda IM (Microsoft Windows), with a third-party plugin [4]
- Trillian (Microsoft Windows) with a third-party plugin [5]
Via Proxy
For those clients which have no native OTR support, a proxy is available. That means that the messages are sent to the proxy unencrypted and get encrypted while they “flow” through this locally installed and running application called a proxy. Presently the proxy provided by the OTR-project supports only the OSCAR-protocol, thus it can be used for .Mac, ICQ, and AIM. The OTR proxy is capable of SOCKS5, HTTPS, and HTTP.
Some .Mac, ICQ, and AIM clients that support proxies, but don’t support OTR natively:
WASTE
WASTE is an anonymous, secure, and encryped collaboration tool which allows users to both share ideas through the chat interface and share data through the download system. WASTE is RSA secured, and has been hearalded as the most secure P2P connection protocol currently in development.
- WASTE is currently available for 32-bit Windows operating systems as a client and server, Mac OS X as a limited client and server, and as a limited functionality server for Linux, FreeBSD, Mac OS X, and Windows. Porting to other operating systems should be a breeze, as the source is provided (and the network code itself is pretty portable).
- WASTE is licensed under the GPL.
- WASTE currently provides the following services:
- Instant Messaging (with presence)
- Group Chat
- File browsing/searching
- File transfer (upload and download)
- Network architecture: WASTE uses a distributed architecture that allows for nodes to connect in a partial mesh type network. Nodes on the network can broadcast and route traffic. Nodes that are not publicly accessible or on slow links can choose not to route traffic. This network is built such that all services utilize the network, so firewall issues become moot. more information.
- Security: WASTE uses link-level encryption to secure links, and public keys for authentication. RSA is used for session key exchange and authentication, and the links are encrypted using Blowfish in PCBC mode. The automatic key distribution security model is very primitive at the moment, and may not lend itself well to some social situations. more information.
- WASTE is currently available for 32-bit Windows operating systems as a client and server, Mac OS X as a limited client and server, and as a limited functionality server for Linux, FreeBSD, Mac OS X, and Windows. Porting to other operating systems should be a breeze, as the source is provided (and the network code itself is pretty portable).
- WASTE is licensed under the GPL.
- WASTE currently provides the following services:
- Instant Messaging (with presence)
- Group Chat
- File browsing/searching
- File transfer (upload and download)
- Network architecture: WASTE uses a distributed architecture that allows for nodes to connect in a partial mesh type network. Nodes on the network can broadcast and route traffic. Nodes that are not publicly accessible or on slow links can choose not to route traffic. This network is built such that all services utilize the network, so firewall issues become moot. more information.
- Security: WASTE uses link-level encryption to secure links, and public keys for authentication. RSA is used for session key exchange and authentication, and the links are encrypted using Blowfish in PCBC mode. The automatic key distribution security model is very primitive at the moment, and may not lend itself well to some social situations. more information.
