Editing Trillian (software) (section)

=== SecureIM ===
SecureIM is an [[encryption]] system built into the Trillian Instant Messenger Client.

It encrypts messages from user to user, so no passively observing [[Node (networking)|node]] between the two is supposedly able to read the encrypted messages. SecureIM does ''not'' [[Authentication|authenticate]] its messages, and therefore it is susceptible to active attacks including simple forms of [[man-in-the-middle attack]]s.

According to Cerulean Studios, the makers of Trillian, SecureIM enciphers messages with 128-bit [[Blowfish (cipher)|Blowfish]] encryption. It only works with the [[OSCAR protocol]] and if both chat partners use Trillian.

However, the key used for encryption is established using a [[Diffie–Hellman key exchange]] which only uses a 128 bit prime number as modulus, which is extremely insecure and can be broken within minutes on a standard [[Personal computer|PC]].