WhatsApp’s Promise of True Encryption Proven False



/ 3 years ago

whatsapp

Last year, the Facebook-owned messaging app Whatsapp, in a move applauded by privacy advocates, announced that it would be introducing end-to-end encryption to protect user data from being intercepted in transit, viewable only by sender and receiver. While, strictly speaking, WhatsApp did as it promised – using a system designed by Open Whisper Systems, creator of the Edward Snowden-endorsed messaging app Signal – it turns out that a fatal flaw in the encryption method has left a security hole that can be exploited, researchers from Brno University of Technology in the Czech Republic have discovered [PDF].

The Brno University researchers were able to reverse-engineer WhatsApp’s security protocol, which could give them access to supposedly encrypted messages sent via the app. How did it manage this if end-to-end encryption is really being implemented? While WhatsApp is using what is known as Public Key Encryption, it is using the same public key for every person, meaning that anyone who can decipher the key can access messages sent by any user, and that WhatsApp itself can access sent messages, something it claimed its end-to-end encryption would prevent.

An oversight like using the same public key for every user appears too specific to be accidental. Was WhatsApp presenting the illusion of end-to-end encryption to hide a secret backdoor from its customers? It’s a move that would certainly have the approval of the UK Government.

Topics: , , , , , ,

Support eTeknix.com

By supporting eTeknix, you help us grow. And continue to bring you the latest news, reviews, and competitions. Follow us on Facebook and Twitter to keep up with the latest technology. Share your favourite articles, chat with the team and more. Also check out eTeknix YouTube, where you'll find our latest video reviews, event coverage and features in 4K!
eTeknix FacebookeTeknix TwittereTeknix Instagram

Check out our Latest Video

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

  • Be Social with eTeknix

  • Poll

    Who Is Your Favourite Motherboard Brand?

    View Results