Project Description

D-Bus is a easy to use message-oriented mechanism that allows communication between multiple processes running concurrently on the same machine. Any application running on the session bus can install a monitor hook over the bus to listen to all exchanged messages. Sensitive information such as mail passwords will be exchanged in plain text. A malicious software can easily listen and parse all those sensitive messages.

Goal for this Hackweek

This project is about experimenting simple D-Bus message encryption. For learning purpose, a Diffie–Hellman key exchange will be implemented in order to encrypt messages exchanged over the bus. For that, the The GNU Multiple Precision Arithmetic Library will be used.

Resources

https://www.freedesktop.org/wiki/Software/dbus/

https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellmankeyexchange

https://gmplib.org/

https://together.jolla.com/question/185264/dbus-monitor-shows-mail-password-in-clear-text-and-other-sensitive-information/