writeups.xyz / “Please do not make it public” - Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping

Submitter : c2a

Date: 9 August 2023

Bounty : undisclosed

Vulnerabilities :

• Cryptographic Issues
• Padding Oracle Attack
• Windows
• Android
• IOS

Programs :

• Tencent

Authors :

• Jeffrey Knockel
• Zoë Reichert
• Mona Wang

Link :
https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/