Apple Hardens iMessage Against Quantum Computing Threats
Via TechCrunch
The Story
Apple announced PQ3, a new post quantum encryption protocol for iMessage designed to protect conversations from future quantum computing attacks, on February 21, 2024.
The protocol layers post quantum cryptography, including the Kyber algorithm, on top of iMessage's existing elliptic curve encryption, and Apple described the result as Level 3 security, the strongest claimed by any messaging platform at the time.
Rather than replacing its encryption wholesale, Apple designed PQ3 to refresh session keys continuously so a single compromised key cannot unlock an entire conversation history.
The design targets harvest now, decrypt later attacks, in which adversaries collect encrypted messages today and wait for quantum computers powerful enough to break them.
Two academic research teams evaluated the PQ3 standard before launch, though real world testing remains impossible because quantum machines capable of breaking current encryption are not yet available.
The upgrade rolled out with iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4, following Signal's earlier post quantum move and Meta's push to encrypt Messenger and Instagram, and it placed iMessage among the most quantum resistant consumer messaging platforms in the world.
The protocol layers post quantum cryptography, including the Kyber algorithm, on top of iMessage's existing elliptic curve encryption, and Apple described the result as Level 3 security, the strongest claimed by any messaging platform at the time.
Rather than replacing its encryption wholesale, Apple designed PQ3 to refresh session keys continuously so a single compromised key cannot unlock an entire conversation history.
The design targets harvest now, decrypt later attacks, in which adversaries collect encrypted messages today and wait for quantum computers powerful enough to break them.
Two academic research teams evaluated the PQ3 standard before launch, though real world testing remains impossible because quantum machines capable of breaking current encryption are not yet available.
The upgrade rolled out with iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4, following Signal's earlier post quantum move and Meta's push to encrypt Messenger and Instagram, and it placed iMessage among the most quantum resistant consumer messaging platforms in the world.
Go Deeper
Read the original reporting at TechCrunch.
Read Full Story at TechCrunch →