In a very real sense you do need access to the device to install the backdoored client.
There is no actual cryptographic weakness presented here...
There is no actual cryptographic weakness presented here...
but the protocol itself does not look reliable, since encoding 85% of messages is quite easy once you change your message padding a bit according to the paper unlike what's used in signal