You can reduce the size of TDLib

[isopen]

Hello

I’ve been experimenting a bit with Telegram’s MTProto and RPC. I think that in a modern implementation, we could completely do away with OpenSSL. It’s an overly heavy dependency that causes a lot of complications - not just during the build process.

In my solution, I implemented the Crypton module for this purpose. I added the implementation of all the necessary algorithms to it, and the solution became simpler.
https://github.com/isopen/ton-ai-core/tree/master/packages/core/src/crypton

Next, Crypton makes use of MTProto, the TL language, and transport layers in the other modules as needed. As a result, my telegram-agent successfully connects to Telegram servers and completes authorization.
https://github.com/isopen/ton-ai-core/tree/master/agents/telegram-agent

Why don't you want to support your crypto layer?

[levlam]

It is very hard to securely implement cryptographic primitives, therefore it is better to use a well-known library for this. Moreover, OpenSSL is used to support HTTPS, therefore it can be replaced only with another TLS library.

[isopen]

I think the time has come to introduce competition in cryptography. Relying solely on OpenSSL everywhere is a bad thing and impacts binary size. We could achieve better performance by using modern AI models.

[levlam]

As I said, full TLS implementation is required.

[isopen]

Will Telegram be able to handle it?

[isopen]

@levlam I don't see any difficulties in implementing the primitives. I managed to extend Crypton with the aes-256-cbc, aes-256-ctr, and aes-256-ecb algorithms, which run successfully via web workers in the browser. It took very little time. It currently operates via TCP and WebSocket on Crypton.

I'm currently trying to build a Telegram UI using vanilla JS. For building a more flexible JavaScript frontend without a dependency on React or other frameworks, yet incorporating some of their principles.

[levlam]

It is very hard to implement them safely.

[isopen]

@levlam isopen/ton-ai-core@5b0b5d3

Overall, I managed to create a basic version of browser-based components using AI generation, with my role being to guide the AI ​​in architecting the system.
Several components are now available:

1. crypton - cryptographic primitives required for operation.
2. gram-db - the beginnings of a TDLib equivalent. It currently supports only OPFS and encrypts the storage; this can be expanded and made more versatile in the future.
3. gram-ui - here lies a custom-built framework similar to React, but implemented from scratch. Several components are built upon it.
4. zlib - custom implementation of a well-known library.
5. tl-language - implementation of a type language.
6. gram-browser - here is an agent that allows you to communicate via Telegram.

I am convinced that nowadays it is possible to break free from addictions. They can cause serious harm in the future.
For instance, we recently saw the suspension of the t.me domain; what is stopping them from banning Telegram from using dependencies it has built up over the years - such as OpenSSL or any others you rely on without looking ahead?