Off-The-Record Whisper or OTRWhisper is a Wow AddOn to provide a (poorly) secure end-to-end encryption on in-game whisper chat messages.
- Off-The-Record communication (Forward secrecy & Deniable authentication)
- Block all non-OTR incoming whispers
- User only friendlist as OTR
The 'whispers' are limited to those from players (no battle.net) who are on the same (connected) realm.
This current state is insecure as this is just a PoC!
Just for fun, the asymmetric keys are done using Deffie Hellman key exchange with prime 2147483647
and generator 2
. This key exchange is done at the start of a conversation when the initial in-game whisper is sent out.
The symmetric encryption algorithm for encrypting/decryption the content of a message is done by a simple XOR loop. (TODO: use something from this list)