{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:5JNPAYXYDX7J5JDXO267UUJHGW","short_pith_number":"pith:5JNPAYXY","schema_version":"1.0","canonical_sha256":"ea5af062f81dfe9ea47776bdfa5127358c9846efb8f1023a5ca49faff45a481e","source":{"kind":"arxiv","id":"2012.03141","version":2},"attestation_state":"computed","paper":{"title":"Automated Symbolic Verification of Telegram's MTProto 2.0","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Marino Miculan, Nicola Vitacolonna","submitted_at":"2020-12-05T23:21:11Z","abstract_excerpt":"MTProto 2.0 is a suite of cryptographic protocols for instant messaging at the core of the popular Telegram messenger application. In this paper we analyse MTProto 2.0 using the symbolic verifier ProVerif. We provide fully automated proofs of the soundness of MTProto 2.0's authentication, normal chat, end-to-end encrypted chat, and rekeying mechanisms with respect to several security properties, including authentication, integrity, secrecy and perfect forward secrecy; at the same time, we discover that the rekeying protocol is vulnerable to an unknown key-share (UKS) attack. We proceed in an i"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2012.03141","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-05T23:21:11Z","cross_cats_sorted":[],"title_canon_sha256":"632979178f51aff02aa0a68b1f287e346c7deda80a4ea07eda2020db9f77a0e4","abstract_canon_sha256":"9f7d2831b5ee3a779bd44b4dc10a987276007ae8b997f34fa94ba506d5150d37"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:00:29.288606Z","signature_b64":"TfBrNRx99i45Wb3y2elstNKJEIzDRZL8ynuPdyzOZzZaAhWrOmtgiFRxAletPq+ozVUwNqzbY7M42t1nuFzkCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea5af062f81dfe9ea47776bdfa5127358c9846efb8f1023a5ca49faff45a481e","last_reissued_at":"2026-07-05T03:00:29.288214Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:00:29.288214Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Automated Symbolic Verification of Telegram's MTProto 2.0","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Marino Miculan, Nicola Vitacolonna","submitted_at":"2020-12-05T23:21:11Z","abstract_excerpt":"MTProto 2.0 is a suite of cryptographic protocols for instant messaging at the core of the popular Telegram messenger application. In this paper we analyse MTProto 2.0 using the symbolic verifier ProVerif. We provide fully automated proofs of the soundness of MTProto 2.0's authentication, normal chat, end-to-end encrypted chat, and rekeying mechanisms with respect to several security properties, including authentication, integrity, secrecy and perfect forward secrecy; at the same time, we discover that the rekeying protocol is vulnerable to an unknown key-share (UKS) attack. We proceed in an i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.03141","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.03141/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2012.03141","created_at":"2026-07-05T03:00:29.288270+00:00"},{"alias_kind":"arxiv_version","alias_value":"2012.03141v2","created_at":"2026-07-05T03:00:29.288270+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.03141","created_at":"2026-07-05T03:00:29.288270+00:00"},{"alias_kind":"pith_short_12","alias_value":"5JNPAYXYDX7J","created_at":"2026-07-05T03:00:29.288270+00:00"},{"alias_kind":"pith_short_16","alias_value":"5JNPAYXYDX7J5JDX","created_at":"2026-07-05T03:00:29.288270+00:00"},{"alias_kind":"pith_short_8","alias_value":"5JNPAYXY","created_at":"2026-07-05T03:00:29.288270+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"1908.10187","citing_title":"A Machine Learning Approach for Smartphone-based Sensing of Roads and Driving Style","ref_index":66,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW","json":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW.json","graph_json":"https://pith.science/api/pith-number/5JNPAYXYDX7J5JDXO267UUJHGW/graph.json","events_json":"https://pith.science/api/pith-number/5JNPAYXYDX7J5JDXO267UUJHGW/events.json","paper":"https://pith.science/paper/5JNPAYXY"},"agent_actions":{"view_html":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW","download_json":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW.json","view_paper":"https://pith.science/paper/5JNPAYXY","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2012.03141&json=true","fetch_graph":"https://pith.science/api/pith-number/5JNPAYXYDX7J5JDXO267UUJHGW/graph.json","fetch_events":"https://pith.science/api/pith-number/5JNPAYXYDX7J5JDXO267UUJHGW/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW/action/timestamp_anchor","attest_storage":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW/action/storage_attestation","attest_author":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW/action/author_attestation","sign_citation":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW/action/citation_signature","submit_replication":"https://pith.science/pith/5JNPAYXYDX7J5JDXO267UUJHGW/action/replication_record"}},"created_at":"2026-07-05T03:00:29.288270+00:00","updated_at":"2026-07-05T03:00:29.288270+00:00"}