# Ratchet

Ratchet is a PHP library that provides developers with tools to create real-time, bidirectional applications over WebSockets.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## A bit more on Twitter/X's new encrypted messaging

DevFeed: [A bit more on Twitter/X's new encrypted messaging](<https://devfeed.tech/articles/a-bit-more-on-twitter-x-s-new-encrypted-messaging-29091.md>)

Original publisher: [Read original article](<https://blog.cryptographyengineering.com/2025/06/09/a-bit-more-on-twitter-xs-new-encrypted-messaging/>)

Author: Matthew Green

Published: 2025-06-09T18:22:31Z

Content type: article

Language: en

Sources: [Matthew Green](<https://devfeed.tech/sources/matthew-green.md>)

Topics: [End-to-End Encryption](<https://devfeed.tech/topics/end-to-end-encryption.md>), [X (Twitter)](<https://devfeed.tech/topics/twitter.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [public key](<https://devfeed.tech/topics/public-key.md>), [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [Server](<https://devfeed.tech/topics/server.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Meta](<https://devfeed.tech/topics/meta.md>)

Tags: [e2e](<https://devfeed.tech/tags/e2e.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [instagram](<https://devfeed.tech/tags/instagram.md>), [messaging](<https://devfeed.tech/tags/messaging.md>), [messenger](<https://devfeed.tech/tags/messenger.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [protocols](<https://devfeed.tech/tags/protocols.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [secret-storage](<https://devfeed.tech/tags/secret-storage.md>), [security](<https://devfeed.tech/tags/security.md>), [signal](<https://devfeed.tech/tags/signal.md>), [technology](<https://devfeed.tech/tags/technology.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This article examines XChat, X's end-to-end encrypted messaging protocol, focusing on its lack of forward secrecy and its server-side storage of user private keys. It explains the Juicebox key-storage design and argues that the security of the system depends heavily on its deployment and server protections.

### Source excerpt

Update 6/10: Based on a short conversation with an engineering lead at X, some of the devices used at X are claimed to be using HSMs. See more further below. Matthew Garrett has a nice post about Twitter (uh, X)'s new end-to-end encryption messaging protocol, which is now called XChat. The TL;DR of Matthew's post ... Continue reading A bit more on Twitter/X's new encrypted messaging ->

## Signal on the outside, Signal on the inside

DevFeed: [Signal on the outside, Signal on the inside](<https://devfeed.tech/articles/signal-on-the-outside-signal-on-the-inside-1831.md>)

Original publisher: [Read original article](<https://signal.org/blog/signal-inside-and-out/>)

Published: 2016-03-30T00:00:00Z

Content type: release

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [End-to-End Encryption](<https://devfeed.tech/topics/end-to-end-encryption.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Messaging](<https://devfeed.tech/topics/messaging.md>), [C](<https://devfeed.tech/topics/c.md>), [Java](<https://devfeed.tech/topics/java.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Objective-C](<https://devfeed.tech/topics/objective-c.md>)

Tags: [c](<https://devfeed.tech/tags/c.md>), [communication](<https://devfeed.tech/tags/communication.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [github](<https://devfeed.tech/tags/github.md>), [java](<https://devfeed.tech/tags/java.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [messaging](<https://devfeed.tech/tags/messaging.md>), [open-source](<https://devfeed.tech/tags/open-source.md>)

### AI overview

Signal renamed the Axolotl cryptographic messaging protocol to Signal Protocol to reduce confusion and simplify terminology. Its open-source implementations remain available for C, Objective-C, Java, and JavaScript in the Signal GitHub repository, and are being adopted by more communication apps.

### Source excerpt

A few months ago we completed the process of unifying all of our apps across Android, iOS, and the Desktop under the name 'Signal.' This simplified the language around our apps and eliminated a lot of confusion. Now we're doing the same thing "inside" our apps by renaming Axolotl to Signal Protocol. Axolotl has been the name of the cryptographic protocol that our apps use for end-to-end encryption, but it's not the easiest word to pronounce. Sometimes people use 'Axolotl' to refer to just the base double ratchet instead of the full messaging protocol, so there has also been some confusion around what people mean when they say 'Axolotl.' To continue eliminating confusion and simplifying everything within the Signal ecosystem, we're renaming Axolotl to Signal Protocol. The implementations have been renamed, so there are open source Signal Protocol libraries available for C, Objective C, Java, and JavaScript in our GitHub repository, as before. These have been making their way into an increasing number of communication apps, and we're excited for the future of the Signal Protocol as it continues to spread.

## Aloha But Not

DevFeed: [Aloha But Not](<https://devfeed.tech/articles/aloha-but-not-1731.md>)

Original publisher: [Read original article](<https://signal.org/blog/aloha-but-not/>)

Published: 2015-01-23T00:00:00Z

Content type: article

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [Development](<https://devfeed.tech/topics/development.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [iOS](<https://devfeed.tech/topics/ios.md>), [App](<https://devfeed.tech/topics/app.md>), [Networks](<https://devfeed.tech/topics/networks.md>), [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [ChaCha](<https://devfeed.tech/topics/chacha-cipher.md>), [Hackathon](<https://devfeed.tech/topics/hackathon.md>)

Tags: [app](<https://devfeed.tech/tags/app.md>), [blog](<https://devfeed.tech/tags/blog.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [bugs](<https://devfeed.tech/tags/bugs.md>), [code](<https://devfeed.tech/tags/code.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [development](<https://devfeed.tech/tags/development.md>), [hackathon](<https://devfeed.tech/tags/hackathon.md>), [ios](<https://devfeed.tech/tags/ios.md>), [networks](<https://devfeed.tech/tags/networks.md>)

### AI overview

The article recounts the author's path from building an anonymous, secure protest-communication app at a university hackathon to working on Signal. It describes learning iOS development, secure protocols, anonymous networks, elliptic curve cryptography, and the axolotl ratchet while implementing media attachments and fixing bugs for Signal 2.0.

### Source excerpt

Winter Break Of Code Day Eleven Every morning at standup I'd watch the knife spin in slow motion, dread filling my chest and a voice in my head repeating, over and over, "not Slytherin." (The target of the knife is the author of the next day's blog post). I wasn't sure that I could find new ways to marvel at the wonderful absurdity of stepping on a plane and trading reality for this - a chance to work on the world with a group of people that I've only admired from afar. I wasn't sure that I had anything to say that hadn't already been said by my new friends. Read more...

## The View From here

DevFeed: [The View From here](<https://devfeed.tech/articles/the-view-from-here-1862.md>)

Original publisher: [Read original article](<https://signal.org/blog/the-view-from-here/>)

Published: 2015-01-18T00:00:00Z

Content type: opinion

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Messaging](<https://devfeed.tech/topics/messaging.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [SSL](<https://devfeed.tech/topics/ssl.md>)

Tags: [app-development](<https://devfeed.tech/tags/app-development.md>), [auth](<https://devfeed.tech/tags/auth.md>), [blog](<https://devfeed.tech/tags/blog.md>), [crypto](<https://devfeed.tech/tags/crypto.md>), [development](<https://devfeed.tech/tags/development.md>), [security](<https://devfeed.tech/tags/security.md>), [security-engineering](<https://devfeed.tech/tags/security-engineering.md>)

### AI overview

The author describes helping develop TextSecure with Open Whisper Systems by applying the TripleDH idea, prekeys, and an improved OTR ratchet to asynchronous text messaging and email. The resulting core protocol was later refined for multiparty and multidevice use, with additional security features such as stronger authentication and metadata hiding. The article argues that text messaging is an important environment for rapidly deploying secure communication innovations and praises the team's combination of security engineering and user-friendly app development.

### Source excerpt

Winter Break Of Code, Day 6 I've been working with Open Whisper Systems on TextSecure for about a year and a half. I feel like I've earned better treatment than being forced to blog at knifepoint, but here we are, so I'll tell my story. Read more...

## The New TextSecure: Privacy Beyond SMS

DevFeed: [The New TextSecure: Privacy Beyond SMS](<https://devfeed.tech/articles/the-new-textsecure-privacy-beyond-sms-1859.md>)

Original publisher: [Read original article](<https://signal.org/blog/the-new-textsecure/>)

Published: 2014-02-24T00:00:00Z

Content type: release

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [App](<https://devfeed.tech/topics/app.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [End-to-End Encryption](<https://devfeed.tech/topics/end-to-end-encryption.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [Android](<https://devfeed.tech/topics/android.md>), [real-time](<https://devfeed.tech/topics/real-time.md>), [User Experience](<https://devfeed.tech/topics/user-experience.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [open](<https://devfeed.tech/tags/open.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [properties](<https://devfeed.tech/tags/properties.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [real-time](<https://devfeed.tech/tags/real-time.md>), [user-experience](<https://devfeed.tech/tags/user-experience.md>)

### AI overview

The release marks TextSecure's transition from a private SMS app to a private asynchronous instant-messaging app that does not depend on SMS/MMS. It introduces an open protocol for private asynchronous chat, group collaboration, media sharing, and end-to-end encrypted communication, with an emphasis on reducing user friction. The release also adds private group chat and an integrated Android experience that can communicate through SMS/MMS with non-TextSecure users.

### Source excerpt

Today's release of TextSecure is the final step in the transition from a private SMS app to a private asynchronous IM app that does not depend on SMS/MMS. Using the lessons we've learned from the SMS environment over the past four years, we've developed an open protocol for asynchronous chat that enables private communication instantly with friends, private groups for real-time collaboration, and the ability to quickly and seamlessly share media privately - all without depending on SMS. Read more...

## Advanced cryptographic ratcheting

DevFeed: [Advanced cryptographic ratcheting](<https://devfeed.tech/articles/advanced-cryptographic-ratcheting-1728.md>)

Original publisher: [Read original article](<https://signal.org/blog/advanced-ratcheting/>)

Published: 2013-11-26T00:00:00Z

Content type: article

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [Ratchet](<https://devfeed.tech/topics/ratchet.md>), [Security](<https://devfeed.tech/topics/security.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Messaging](<https://devfeed.tech/topics/messaging.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>)

Tags: [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [messaging](<https://devfeed.tech/tags/messaging.md>), [open](<https://devfeed.tech/tags/open.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article describes improvements to TextSecure's encrypted asynchronous chat protocol, including a key exchange mechanism for asynchronous transports and an enhanced OTR forward-secrecy ratchet. It explains how ephemeral Diffie-Hellman keys are advertised, acknowledged, and advanced during a session to protect recorded ciphertext if a later key compromise occurs.

### Source excerpt

At Open Whisper Systems, we've been working on improving our encrypted asynchronous chat protocol for TextSecure. The TextSecure protocol was originally a derivative of OTR, with minor changes to accommodate it for transports with constraints like SMS or Push. Some of the recent changes we've made include simplifying and improving OTR's deniability, as well as creating a key exchange mechanism for asynchronous transports. Our most recent change incorporates what we believe to be substantial improvements to OTR's forward secrecy "ratchet." Read more...