[Cryptography] Security Discussion: Password Based Key Derivation for Elliptic curve Diffie–Hellman key agreement

[Jacob Appelbaum]

SafeChat.IM:
> Dear mailing list,
>  
> A friend and me are working on a plugin that enables encryption on top of Facebook messaging. The idea is to encrypt messages before they leave the chat client, sending only the cipher to Facebook and decrypt the message on the receiver client, before it is displayed. The plugin automatically realizes which users have it installed and only encrypts these chats.
>  

Why not simply use OTR? It works with Facebook chat already?

All the best,
Jacob