Gmail is making it easier for businesses to send encrypted emails
(theverge.com)
Google is updating Gmail to allow enterprise users to send encrypted messages to any inbox in just a few clicks.
Google is updating Gmail to allow enterprise users to send encrypted messages to any inbox in just a few clicks.
Fix U.S. National Security
(github.com/signalapp)
This pull request introduces a COMSEC (communications security) advisory banner to chat threads, reminding specific pool of users that Signal—despite its robust encryption—is not an appropriate venue for discussing classified information, coordinating military operations, or engaging in off-the-books foreign policy.
This pull request introduces a COMSEC (communications security) advisory banner to chat threads, reminding specific pool of users that Signal—despite its robust encryption—is not an appropriate venue for discussing classified information, coordinating military operations, or engaging in off-the-books foreign policy.
Trump calls Signal chat fallout a 'witch hunt',says 'app could be defective'
(apnews.com)
President Donald Trump downplayed the Signal chat leak Wednesday as a “witch hunt” and said, without evidence, that the encrypted messaging app “could be defective” as his administration struggles to stem the fallout.
President Donald Trump downplayed the Signal chat leak Wednesday as a “witch hunt” and said, without evidence, that the encrypted messaging app “could be defective” as his administration struggles to stem the fallout.
CIA Director Reveals Signal Comes Installed on Agency Computers
(theintercept.com)
For years, U.S. officials villainized end-to-end encrypted messaging apps like Signal as the domain of criminals and terrorists and a threat to national security.
For years, U.S. officials villainized end-to-end encrypted messaging apps like Signal as the domain of criminals and terrorists and a threat to national security.
NSA warned of vulnerabilities in Signal app a month before Houthi strike chat
(cbsnews.com)
The National Security Agency sent out an operational security special bulletin to its employees in February 2025 warning them of vulnerabilities in using the encrypted messaging application Signal, according to internal NSA documents obtained by CBS News.
The National Security Agency sent out an operational security special bulletin to its employees in February 2025 warning them of vulnerabilities in using the encrypted messaging application Signal, according to internal NSA documents obtained by CBS News.
The Practical Limitations of End-to-End Encryption
(soatok.blog)
Internet discussions about end-to-end encryption are plagued by misunderstandings, misinformation, and some people totally missing the point.
Internet discussions about end-to-end encryption are plagued by misunderstandings, misinformation, and some people totally missing the point.
More Countries Are Demanding Back-Doors to Encrypted Apps
(schneier.com)
Last month I wrote about the UK forcing Apple to break its Advanced Data Protection encryption in iCloud. More recently, both Sweden and France are contemplating mandating back doors. Both initiatives are attempting to scare people into supporting back doors, which are—of course—are terrible idea.
Last month I wrote about the UK forcing Apple to break its Advanced Data Protection encryption in iCloud. More recently, both Sweden and France are contemplating mandating back doors. Both initiatives are attempting to scare people into supporting back doors, which are—of course—are terrible idea.
Chunking Attacks on Tarsnap (and Others)
(daemonology.net)
Ten years ago I wrote that it would require someone smarter than me to extract information from the way that Tarsnap splits data into chunks.
Ten years ago I wrote that it would require someone smarter than me to extract information from the way that Tarsnap splits data into chunks.
France rejects backdoor mandate
(eff.org)
In a moment of clarity after initially moving forward a deeply flawed piece of legislation, the French National Assembly has done the right thing: it rejected a dangerous proposal that would have gutted end-to-end encryption in the name of fighting drug trafficking.
In a moment of clarity after initially moving forward a deeply flawed piece of legislation, the French National Assembly has done the right thing: it rejected a dangerous proposal that would have gutted end-to-end encryption in the name of fighting drug trafficking.
Deniable Encryption
(wikipedia.org)
In cryptography and steganography, plausibly deniable encryption describes encryption techniques where the existence of an encrypted file or message is deniable in the sense that an adversary cannot prove that the plaintext data exists.
In cryptography and steganography, plausibly deniable encryption describes encryption techniques where the existence of an encrypted file or message is deniable in the sense that an adversary cannot prove that the plaintext data exists.
RCS Encryption: A Leap Towards Secure and Interoperable Messaging
(gsma.com)
In my last post, ‘RCS Now in iOS: a New Chapter for Mobile Messaging‘, I celebrated the integration of Rich Communication Services (RCS) with Apple’s iOS 18, a culmination of years of collaboration across mobile operators, device manufacturers, and technology providers. Today, I am pleased to announce the next milestone: the availability of new GSMA specifications for RCS that include end-to-end encryption (E2EE) based on the Messaging Layer Security (MLS) protocol.
In my last post, ‘RCS Now in iOS: a New Chapter for Mobile Messaging‘, I celebrated the integration of Rich Communication Services (RCS) with Apple’s iOS 18, a culmination of years of collaboration across mobile operators, device manufacturers, and technology providers. Today, I am pleased to announce the next milestone: the availability of new GSMA specifications for RCS that include end-to-end encryption (E2EE) based on the Messaging Layer Security (MLS) protocol.
RCS texting updates will bring end-to-end encryption to green bubble chats
(arstechnica.com)
Now that Apple is on board, iPhones and their users can also benefit from continued improvements to the RCS standard. And one major update was announced today: RCS will now support end-to-end encryption using the Messaging Layer Security (MLS) protocol, a standard finalized by the Internet Engineering Task Force in 2023.
Now that Apple is on board, iPhones and their users can also benefit from continued improvements to the RCS standard. And one major update was announced today: RCS will now support end-to-end encryption using the Messaging Layer Security (MLS) protocol, a standard finalized by the Internet Engineering Task Force in 2023.
Apple's alleged UK encryption battle sparks political and privacy backlash
(theregister.com)
US politicians and privacy campaigners are calling for the private hearing between Apple and the UK government regarding its alleged encryption-busting order to be aired in public.
US politicians and privacy campaigners are calling for the private hearing between Apple and the UK government regarding its alleged encryption-busting order to be aired in public.
Apple to Support Encrypted RCS Messaging in Future Software Update
(macrumors.com)
Apple says it will add support for a new Rich Communication Services (RCS) specification that includes end-to-end encryption (E2EE) for messages sent over the protocol in future software updates.
Apple says it will add support for a new Rich Communication Services (RCS) specification that includes end-to-end encryption (E2EE) for messages sent over the protocol in future software updates.
We stopped trusting clouds and started encrypting our data
(vas3k.com)
Remember the situation: you want to send that fresh dank meme to your friend (let's say) Greg. You open your favorite messenger, find the chat with Greg, attach the meme and hit send.
Remember the situation: you want to send that fresh dank meme to your friend (let's say) Greg. You open your favorite messenger, find the chat with Greg, attach the meme and hit send.
UK petition to keep Apple data encrypted
(38degrees.org.uk)
Stop the Home Office from putting our security at risk by demanding a backdoor into Apple's encrypted services.
Stop the Home Office from putting our security at risk by demanding a backdoor into Apple's encrypted services.
UK quietly scrubs encryption advice from government websites
(techcrunch.com)
The U.K. government appears to have quietly scrubbed encryption advice from government web pages, just weeks after demanding backdoor access to encrypted data stored on Apple’s cloud storage service, iCloud.
The U.K. government appears to have quietly scrubbed encryption advice from government web pages, just weeks after demanding backdoor access to encrypted data stored on Apple’s cloud storage service, iCloud.
Dear Apple: Add "Disappearing Messages" to iMessage
(cryptographyengineering.com)
Apple iMessage is encrypted, but is it “secure”?
Apple iMessage is encrypted, but is it “secure”?
NCSC, GCHQ, UK Gov't expunge advice to “use Apple encryption”
(alecmuffett.com)
This is some really embarrassing timing on the Home Office’s (HO’s) part: a few weeks ago when news first broke of the HO’s demand for a backdoor in Apple ADP, I pointed out to MP David Davis that the HO actually extolled use of ADP by at-risk groups:
This is some really embarrassing timing on the Home Office’s (HO’s) part: a few weeks ago when news first broke of the HO’s demand for a backdoor in Apple ADP, I pointed out to MP David Davis that the HO actually extolled use of ADP by at-risk groups:
Apple takes UK to court over 'backdoor' order
(theregister.com)
Apple has reportedly filed a legal complaint with the UK's Investigatory Powers Tribunal (IPT) contesting the UK government's order that it must forcibly break the encryption of iCloud data.
Apple has reportedly filed a legal complaint with the UK's Investigatory Powers Tribunal (IPT) contesting the UK government's order that it must forcibly break the encryption of iCloud data.
Learn How to Break AES
(davidwong.fr)
This page is here to teach you about block cipher cryptanalysis. It does not pretend to be an exhaustive list of attacks, but will give you enough to get started.
This page is here to teach you about block cipher cryptanalysis. It does not pretend to be an exhaustive list of attacks, but will give you enough to get started.
The UK will neither confirm nor deny that it's killing encryption
(theverge.com)
The United Kingdom dealt a significant blow in its war on encryption last week that, aside from blemishing Apple’s meticulously curated privacy commitments, could have worldwide ramifications for personal data protections.
The United Kingdom dealt a significant blow in its war on encryption last week that, aside from blemishing Apple’s meticulously curated privacy commitments, could have worldwide ramifications for personal data protections.
France is about to pass the worst surveillance law in the EU
(tuta.com)
France is about to amend a bill against drug trafficking, the “Narcotrafic” law, which will force encrypted messaging apps like Signal and WhatsApp to backdoor the encryption for being able to hand over decrypted chat messages of suspected criminals within 72 hours of the request.
France is about to amend a bill against drug trafficking, the “Narcotrafic” law, which will force encrypted messaging apps like Signal and WhatsApp to backdoor the encryption for being able to hand over decrypted chat messages of suspected criminals within 72 hours of the request.
France is about to pass the worst surveillance law in the EU
(tuta.com)
France is about to amend a bill against drug trafficking, the “Narcotrafic” law, which will force encrypted messaging apps like Signal and WhatsApp to backdoor the encryption for being able to hand over decrypted chat messages of suspected criminals within 72 hours of the request.
France is about to amend a bill against drug trafficking, the “Narcotrafic” law, which will force encrypted messaging apps like Signal and WhatsApp to backdoor the encryption for being able to hand over decrypted chat messages of suspected criminals within 72 hours of the request.
Signal will withdraw from Sweden if encryption-busting laws take effect
(theregister.com)
Signal CEO Meredith Whittaker says her company will withdraw from countries that force messaging providers to allow law enforcement officials to access encrypted user data, as Sweden continues to mull such plans.
Signal CEO Meredith Whittaker says her company will withdraw from countries that force messaging providers to allow law enforcement officials to access encrypted user data, as Sweden continues to mull such plans.