Comparison of Telegram vs Signal

Telegram vs Signal.md

Telegram vs Signal

The table highlights key differences between Telegram and Signal, especially in terms of security and privacy.

Feature	Telegram	Signal
1. End-to-end encrypt conversations by default	❌	✅
2. Uses a standard authenticated encryption mode	❌	✅
3. Encrypted group chats	❌	✅
4. Does not allow connections with nearby users	❌	✅
5. Open-source code for the client	✅	✅
6. Open-source code for the server	❌	✅
7. Collects minimal metadata	❌	✅

1. End-to-end encrypt conversations by default

• "Telegram clearly fails to meet this stronger definition for a simple reason: it does not end-to-end encrypt conversations by default. If you want to use end-to-end encryption in Telegram, you must manually activate an optional end-to-end encryption feature called “Secret Chats” for every single private conversation you want to have." (https://blog.cryptographyengineering.com/2024/08/25/telegram-is-not-really-an-encrypted-messaging-app/)
• "Signal conversations are always end-to-end encrypted, which means that they can only be read or heard by your intended recipients. Privacy isn’t an optional mode — it’s just the way that Signal works. Every message, every call, every time." (https://support.signal.org/hc/en-us/articles/360007320391-Is-it-private-Can-I-trust-it)

2. Uses a standard authenticated encryption mode

• "The resulting keys are then used to power the most amazing, non-standard authenticated encryption mode ever invented, something called “Infinite Garble Extension” (IGE) based on AES and with SHA2 handling authentication." (https://blog.cryptographyengineering.com/2024/08/25/telegram-is-not-really-an-encrypted-messaging-app/)
• "The protocol combines the Double Ratchet Algorithm, prekeys, and a triple Elliptic-curve Diffie–Hellman (3-DH) handshake, and uses Curve25519, AES-256, and HMAC-SHA256 as primitives." (https://en.wikipedia.org/wiki/Signal_Protocol)

3. Encrypted group chats

• "The feature is explicitly not turned on for the vast majority of conversations, and is only available for one-on-one conversations, and never for group chats with more than two people in them." (https://blog.cryptographyengineering.com/2024/08/25/telegram-is-not-really-an-encrypted-messaging-app/)
• "The Signal Protocol also supports end-to-end encrypted group chats." (https://en.wikipedia.org/wiki/Signal_Protocol)

4. Does not allow connections with nearby users

• "People Nearby is an optional feature that allows Telegram users to explore local groups, find friends to chat with in their area, or quickly exchange contacts with people who are close." (https://telegram.org/faq#q-what-is-people-nearby)

5. Open-source code for the client

• (https://github.com/TelegramMessenger/Telegram-iOS)
• (https://github.com/signalapp/Signal-iOS)

6. Open-source code for the server

• (https://github.com/signalapp/Signal-Server)

7. Collects minimal metadata

• "In addition to the end-to-end encryption that protects every Signal message, the Signal service is designed to minimize the data that is retained about Signal users. By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, group memberships, group titles, or group avatars." (https://signal.org/blog/sealed-sender/)

Please note: This comparison is based on publicly available information and is intended for general informational purposes only. For the most accurate and up-to-date details, refer to the official websites of Telegram and Signal.

Feel free to suggest more features for comparison or point out any errors in the comments.