Editing SILC (protocol) (section)

== Security ==
As described in the SILC FAQ, chats are secured through the generation of [[symmetric encryption]] keys. These keys have to be generated somewhere, and this occurs on the server.  This means that chats might be compromised, if the server itself is compromised.  This is just a version of the [[man-in-the-middle attack]]. The solution offered is that chat members generate their own public-private keypair for [[asymmetric encryption]].  The private key is shared only by the chat members, and this is done out of band.  The public key is used to encrypt messages into the channel. This approach is still open to compromise, if one of the members of the chat should have their private key compromised, or if they should share the key with another, without agreement of the group.