2024-02-21 14:01:18
Today, cyber threats come in so many forms that many people who do not have knowledge regarding technology cannot keep up with them. One of the most popular channels is messaging apps. That includes scam messages, phishing, and tricks into installing apps without going through the App Store to steal sensitive information.
Quantum computing threats
In the future, hackers will use Quantum computing that can process data faster than normal computers can do. As a result, simple encryption may no longer be sufficient to protect users’ security.
(Image from iBM)
Since Apple launched iMessage, there have been two major security changes: End-to-end encryption by default and the addition of multi-key verification to protect sensitive data and communications. Sensitive information such as personal information Financial information or coordinates
Over the past few years, Apple has continually upgraded its encryption to make it more secure. Using elliptic curve technology, mathematically converting messages into secret messages makes decryption more difficult. At the same time, the Secure Enclave is used on the processing chip. Protect the key that iMessage uses to decrypt
Today, Apple has announced a big change. To prevent cyber threats caused by Quantum computing.
When talking regarding Quantum computing, many people think of computers that have such high processing power that ordinary computers can’t compare. This might pose a threat to the end-to-end encryption currently used. Quantum computing experts report that such attacks have a 50% chance of occurring by 2035, rising to 70% by 2040.
Although the technology used is too advanced for practical use at this time, But hackers use the “harvest Now, decrypt later” method or harvest code that cannot be cracked first. Then it can be decrypted later with Quantum computing. That’s why Apple has had to do more homework on security protocols in iMessage.
Let’s first try to understand the security level of the messaging system.
- Level 0 No end-to-end encryption is set by default, such as QQ, Skype, Telegram, and WeChat.
- Level 1 has text encryption by default. It uses cryptography, which is not immune to quantum computing. Apps that use this type of encryption include Line, Viber, WhatsApp, Signal, and iMessage.
- Level 2 recognizes threats from quantum computing and harvest now and decrypt later attacks. It only protects key exchanges in secure communications, which Signal announced is the first to be widely available.
- Level 3 messaging systems are designed to counteract another threat. Reduce the risk from hackers It can decrypt the keys used to protect communications from endpoints using cryptography techniques to restore the security of future communications. Even if there is a leak Including turning off quantum’s mechanism for transferring compromised keys.
Apple announces upgrades iMessage has Level 3 security using a new algorithm called PQ3, making it the first and only Messenger app to achieve Level 3 security.
Not only is it using a new algorithm, but Apple is also developing a protocol. iMessage has reimagined cryptographic features with state-of-the-art end-to-end encryption to protect communications now and into the future. It also reduces the impact of the key being loose. It limits the number of messages that can be decrypted with a key.
The system is also designed to operate in a hybrid manner to ensure that the post quantum and elliptic curve algorithms work together to enable PQ3 More secure than current protocols
Apple has worked with leading educational institutions. To prove that the new PQ 3 protocol really does help with security, for example, Professor Doulas Tabula from the University of Waterloo found that the PQ 3 protocol is well-engineered for messaging apps by using modern techniques for encrypting in-person communications. end to end, increasing confidence in privacy from hacking with evolving quantum computing technology
The next piece of research is that of Professor David Basin and the research team from ETH Zurich, which will use a symbolic evaluation method by creating a mathematical model to prove that PQ3 is superior in prevention and detection. Advanced testing in the post-quantum era to ensure protocols can protect once morest more sophisticated attacks
PQ3 is the first protocol that can be considered Level 3, making iMessage a step up in security over traditional messaging apps.
Not only that, Apple is also focusing on other essential security aspects of a modern messaging app. One of these is automatic key verification. Currently, only iMessage and WhatsApp have automatic key verification and contact key verification, providing the broadest range of automatic protection available across all user devices.
PQ3 is now in beta with iOS 17.4 which will be released soon. Including expansion to macOS and iPad OS later this year.
From all of this With Apple’s PQ3 know-how, it has the strongest security features yet. Can be extended to messaging protocols of any size in the worldTo increase safety for users
1708533933
#Apple #takes #iMessage #level #PQ3 #preventing #cracking #Quantum #computing #Dailygizmo
