xPal Encyrpted Messenger Security

&gt; They also implemented AES with S-boxes in pure JavaScript (no bitslicing), which adds a cache-timing leak. Yay.<p>From the DEKRA security review certificate [1]: &quot;Proven implementations of cryptographic primitives.&quot; is marked as a pass... (I also couldn&#x27;t find a way to verify the authenticity of this certificate).<p>[1] <a href="https:&#x2F;&#x2F;appdefensealliance.dev&#x2F;reports&#x2F;com.mess.engerx_1717934792836666.pdf" rel="nofollow">https:&#x2F;&#x2F;appdefensealliance.dev&#x2F;reports&#x2F;com.mess.engerx_17179...</a>

Fair review, but I would leave in less than a second after seeing xpal&#x27;s website. Too glossy is never a good sign.

Smartphones were made for idiots, it is just a player of proprietary services, look at how the slogan is copywried &quot;stay anonymous&quot;®©™. Encrypted messenger is Jabber and few p2p solutions, not anything hidden from user. The official website is too Barbie to even read anything on it.

lol glossy sites just feel kinda sus tbh - i always bounce fast