Apple strengthens iMessage security against quantum attack – 02/21/2024 – Tech

Apple updated, this Wednesday (21), the protections of its messaging platform iMessage, with a new “post-quantum” encryption system.

The measure is a precaution against the vulnerability of current cryptographic keys to quantum computers, which will be able to solve mathematical problems in a fraction of the time taken by current machines.

Apple’s new security technology is inspired by the symmetric security key adopted by the messaging app Signal, known for its focus on security. It goes further by adopting a security key renewal mechanism, according to Apple’s announcement.

Until then, iMessage used simple end-to-end encryption like WhatsApp, Viber and Line. Signal had been the first to adopt a security standard capable of resisting attacks from quantum computers.

Telegram does not use end-to-end encryption by default, although you can enable this level of defense in the app’s settings.

The new protocol, known as PQ3, is another indication that technology companies are preparing for a possible advance in quantum computing that could make current methods of protecting messages exchanged by applications obsolete.

“More than simply replacing an existing algorithm with a new one, we rebuilt the iMessage cryptographic protocol from scratch”, says this Wednesday’s post on Apple’s blog. “It will fully replace the existing protocol for all conversations sent this year.”

The iPhone maker claims it has found no evidence of a successful attack against them. The company, however, did not publish a validation test like competitor Signal does.

Still, government authorities and scientists are concerned about the impacts of the advent of quantum computers —advanced machines that exploit the properties of subatomic particles—on current cyber defense systems.

There may be a sudden collapse not only of the privacy of internet communications, but also of financial and infrastructure systems, which rely on encryption as their basis for security.

Late last year, a Reuters investigation explored how the US and China are racing to prepare for this moment, dubbed “Q-Day.” To do this, they invest money in quantum research and new encryption standards known as post-quantum encryption.

The US and China have traded allegations of interception of large amounts of encrypted data in preparation for Q-Day, an approach sometimes dubbed “catch now, break later”.

“Advance planning is necessary,” the U.S. cyber surveillance agency said in a 2022 statement. “Cybercriminals may be targeting data today that will require enhanced protection in the future.”

Apple’s blog says the PQ3 uses a series of new technical safeguards aimed at closing this window of opportunity.

_{With Reuters}