Growing up in Soviet Ukraine in the 1980s, Whatsapp
founder Jan Koum learned to distrust the government
and detest its surveillance. After he emigrated to the
U.S. and created his ultra-popular messaging system
decades later, he vowed that Whatsapp would never
make eavesdropping easy for anyone. Now, Whatsapp
is following through on that anti-snooping promise at
an unprecedented scale.

On Tuesday, Whatsapp announced that it’s
implementing end-to-end encryption, an upgrade to its
privacy protections that makes it nearly impossible for
anyone to read users’ messages—even the company
itself. Whatsapp will integrate the open-source
software Textsecure, created by privacy-focused non-
profit Open Whisper Systems, which scrambles
messages with a cryptographic key that only the user
can access and never leaves his or her device. The
result is practically uncrackable encryption for hundreds
of millions of phones and tablets that have Whatsapp
installed—by some measures the world’s largest-ever
implementation of this standard of encryption in a
messaging service.

“Whatsapp is integrating Textsecure into the most
popular messaging app in the world, where people
exchange billions of messages a day,” says Moxie
Marlinspike, Open Whisper System’s creator and a
well known software developer in the cryptography
community. “I do think this is the largest deployment
of end-to-end encryption ever.”
Textsecure has actually already been quietly
encrypting Whatsapp messages between Android
devices for a week. The new encryption scheme means
Whatsapp messages will now travel all the way to the
recipients’ device before being decrypted, rather than
merely being encrypted between the user’s device and
Whatsapp’s server. The change is nearly invisible,
though Marlinspike says Whatsapp will soon add a
feature to allow users to verify each others’ identities
based on their cryptographic key, a defense against
man-in-the-middle attacks that intercept
conversations. “Ordinary users won’t know the
difference,” says Marlinspike. “It’s totally frictionless.”

In its initial phase, though, Whatsapp’s messaging
encryption is limited to Android, and doesn’t yet apply
to group messages, photos or video messages.
Marlinspike says that Whatsapp plans to expand its
Textsecure rollout into those other features and other
platforms, including Apple’s iOS, soon. He wouldn’t
specify an exact time frame, and Whatsapp staffers
declined to comment on the new encryption features.
Marlinspike says the Textsecure implementation has
been in the works for six months, since shortly after
Whatsapp was acquired by Facebook last February.

Whatsapp’s Android users alone represent a massive
new user base for end-to-end encrypted messaging:
Whatsapp’s page in the Google Play store lists more
than 500 million downloads. Textsecure had previously
been installed on only around 10 million gadgets
running the Cyanogen mod variant of Android and
about 500,000 other devices.

The only encrypted messaging system that compares
in size is Apple’s iMessage, which also claims to use a
version of end-to-end encryption. Compared with
Textsecure, however, Apple’s iMessage security has
some serious shortcomings. iMessage doesn’t track
which devices’ cryptographic keys are associated with
a certain user, so Apple could simply create a new key
the user wasn’t aware of to start intercepting his or
her messages. Additionally, many users unwittingly
back up their stored iMessages to Apple’s iCloud,
which renders any end-to-end encryption moot. Plus,
unlike Textsecure, iMessage doesn’t use a feature
called “forward secrecy” that creates a new encryption
key for each message sent. This means that anyone
who collects a user’s encrypted messages and
successfully cracks a user’s key can decrypt all their
communications, not just the one message that uses
that key.

Whatsapp’s rollout of strong encryption to hundreds
of millions of users may be an unpopular move among
governments around the world, whose surveillance it
could make far more difficult. Whatsapp’s user base is
highly international, with large populations of users in
Europe and India. But Whatsapp founder Jan Koum
has been vocal about his opposition to cooperating
with government snooping. “I grew up in a society
where everything you did was eavesdropped on,
recorded, snitched on,” he told Wired UK earlier this
year. “Nobody should have the right to eavesdrop, or
you become a totalitarian state—the kind of state I
escaped as a kid to come to this country where you
have democracy and freedom of speech. Our goal is to
protect it.”


http://www.wired.com/2014/11/whatsapp-encrypted-messaging/

iOS devices will be getting the same encryption soon. so currently, when user on android chats with whatsapp users on iOS devices, there's no encryption.

u21day:
Growing up in Soviet Ukraine in the 1980s, Whatsapp
founder Jan Koum learned to distrust the government
and detest its surveillance. After he emigrated to the
U.S. and created his ultra-popular messaging system
decades later, he vowed that Whatsapp would never
make eavesdropping easy for anyone. Now, Whatsapp
is following through on that anti-snooping promise at
an unprecedented scale.

On Tuesday, Whatsapp announced that it’s
implementing end-to-end encryption, an upgrade to its
privacy protections that makes it nearly impossible for
anyone to read users’ messages—even the company
itself. Whatsapp will integrate the open-source
software Textsecure, created by privacy-focused non-
profit Open Whisper Systems, which scrambles
messages with a cryptographic key that only the user
can access and never leaves his or her device. The
result is practically uncrackable encryption for hundreds
of millions of phones and tablets that have Whatsapp
installed—by some measures the world’s largest-ever
implementation of this standard of encryption in a
messaging service.

“Whatsapp is integrating Textsecure into the most
popular messaging app in the world, where people
exchange billions of messages a day,” says Moxie
Marlinspike, Open Whisper System’s creator and a
well known software developer in the cryptography
community. “I do think this is the largest deployment
of end-to-end encryption ever.”
Textsecure has actually already been quietly
encrypting Whatsapp messages between Android
devices for a week. The new encryption scheme means
Whatsapp messages will now travel all the way to the
recipients’ device before being decrypted, rather than
merely being encrypted between the user’s device and
Whatsapp’s server. The change is nearly invisible,
though Marlinspike says Whatsapp will soon add a
feature to allow users to verify each others’ identities
based on their cryptographic key, a defense against
man-in-the-middle attacks that intercept
conversations. “Ordinary users won’t know the
difference,” says Marlinspike. “It’s totally frictionless.”

In its initial phase, though, Whatsapp’s messaging
encryption is limited to Android, and doesn’t yet apply
to group messages, photos or video messages.
Marlinspike says that Whatsapp plans to expand its
Textsecure rollout into those other features and other
platforms, including Apple’s iOS, soon. He wouldn’t
specify an exact time frame, and Whatsapp staffers
declined to comment on the new encryption features.
Marlinspike says the Textsecure implementation has
been in the works for six months, since shortly after
Whatsapp was acquired by Facebook last February.

Whatsapp’s Android users alone represent a massive
new user base for end-to-end encrypted messaging:
Whatsapp’s page in the Google Play store lists more
than 500 million downloads. Textsecure had previously
been installed on only around 10 million gadgets
running the Cyanogen mod variant of Android and
about 500,000 other devices.

The only encrypted messaging system that compares
in size is Apple’s iMessage, which also claims to use a
version of end-to-end encryption. Compared with
Textsecure, however, Apple’s iMessage security has
some serious shortcomings. iMessage doesn’t track
which devices’ cryptographic keys are associated with
a certain user, so Apple could simply create a new key
the user wasn’t aware of to start intercepting his or
her messages. Additionally, many users unwittingly
back up their stored iMessages to Apple’s iCloud,
which renders any end-to-end encryption moot. Plus,
unlike Textsecure, iMessage doesn’t use a feature
called “forward secrecy” that creates a new encryption
key for each message sent. This means that anyone
who collects a user’s encrypted messages and
successfully cracks a user’s key can decrypt all their
communications, not just the one message that uses
that key.

Whatsapp’s rollout of strong encryption to hundreds
of millions of users may be an unpopular move among
governments around the world, whose surveillance it
could make far more difficult. Whatsapp’s user base is
highly international, with large populations of users in
Europe and India. But Whatsapp founder Jan Koum
has been vocal about his opposition to cooperating
with government snooping. “I grew up in a society
where everything you did was eavesdropped on,
recorded, snitched on,” he told Wired UK earlier this
year. “Nobody should have the right to eavesdrop, or
you become a totalitarian state—the kind of state I
escaped as a kid to come to this country where you
have democracy and freedom of speech. Our goal is to
protect it.”


http://www.wired.com/2014/11/whatsapp-encrypted-messaging/

Pls summarize it....the story is too much.

It's simple. whatsapp users chatting on Android have encryption. So SSS/NSA etc can't eaves drop your chats. Even whatsapp owners (Facebook) can't see your chats again from their server. it's end to end encryption. @CuteDude53

front page pls

This is serious business. ..

Ok, make i park my LAMBO here

u21day:
Growing up in Soviet Ukraine in the 1980s, Whatsapp
founder Jan Koum learned to distrust the government
and detest its surveillance. After he emigrated to the
U.S. and created his ultra-popular messaging system
decades later, he vowed that Whatsapp would never
make eavesdropping easy for anyone. Now, Whatsapp
is following through on that anti-snooping promise at
an unprecedented scale.

On Tuesday, Whatsapp announced that it’s
implementing end-to-end encryption, an upgrade to its
privacy protections that makes it nearly impossible for
anyone to read users’ messages—even the company
itself. Whatsapp will integrate the open-source
software Textsecure, created by privacy-focused non-
profit Open Whisper Systems, which scrambles
messages with a cryptographic key that only the user
can access and never leaves his or her device. The
result is practically uncrackable encryption for hundreds
of millions of phones and tablets that have Whatsapp
installed—by some measures the world’s largest-ever
implementation of this standard of encryption in a
messaging service.

“Whatsapp is integrating Textsecure into the most
popular messaging app in the world, where people
exchange billions of messages a day,” says Moxie
Marlinspike, Open Whisper System’s creator and a
well known software developer in the cryptography
community. “I do think this is the largest deployment
of end-to-end encryption ever.”
Textsecure has actually already been quietly
encrypting Whatsapp messages between Android
devices for a week. The new encryption scheme means
Whatsapp messages will now travel all the way to the
recipients’ device before being decrypted, rather than
merely being encrypted between the user’s device and
Whatsapp’s server. The change is nearly invisible,
though Marlinspike says Whatsapp will soon add a
feature to allow users to verify each others’ identities
based on their cryptographic key, a defense against
man-in-the-middle attacks that intercept
conversations. “Ordinary users won’t know the
difference,” says Marlinspike. “It’s totally frictionless.”

In its initial phase, though, Whatsapp’s messaging
encryption is limited to Android, and doesn’t yet apply
to group messages, photos or video messages.
Marlinspike says that Whatsapp plans to expand its
Textsecure rollout into those other features and other
platforms, including Apple’s iOS, soon. He wouldn’t
specify an exact time frame, and Whatsapp staffers
declined to comment on the new encryption features.
Marlinspike says the Textsecure implementation has
been in the works for six months, since shortly after
Whatsapp was acquired by Facebook last February.

Whatsapp’s Android users alone represent a massive
new user base for end-to-end encrypted messaging:
Whatsapp’s page in the Google Play store lists more
than 500 million downloads. Textsecure had previously
been installed on only around 10 million gadgets
running the Cyanogen mod variant of Android and
about 500,000 other devices.

The only encrypted messaging system that compares
in size is Apple’s iMessage, which also claims to use a
version of end-to-end encryption. Compared with
Textsecure, however, Apple’s iMessage security has
some serious shortcomings. iMessage doesn’t track
which devices’ cryptographic keys are associated with
a certain user, so Apple could simply create a new key
the user wasn’t aware of to start intercepting his or
her messages. Additionally, many users unwittingly
back up their stored iMessages to Apple’s iCloud,
which renders any end-to-end encryption moot. Plus,
unlike Textsecure, iMessage doesn’t use a feature
called “forward secrecy” that creates a new encryption
key for each message sent. This means that anyone
who collects a user’s encrypted messages and
successfully cracks a user’s key can decrypt all their
communications, not just the one message that uses
that key.

Whatsapp’s rollout of strong encryption to hundreds
of millions of users may be an unpopular move among
governments around the world, whose surveillance it
could make far more difficult. Whatsapp’s user base is
highly international, with large populations of users in
Europe and India. But Whatsapp founder Jan Koum
has been vocal about his opposition to cooperating
with government snooping. “I grew up in a society
where everything you did was eavesdropped on,
recorded, snitched on,” he told Wired UK earlier this
year. “Nobody should have the right to eavesdrop, or
you become a totalitarian state—the kind of state I
escaped as a kid to come to this country where you
have democracy and freedom of speech. Our goal is to
protect it.”


http://www.wired.com/2014/11/whatsapp-encrypted-messaging/

so you expect me (mua) to read all this shit tt

learn to summarise dude

And it can't be decrypted?

Okayyyyyy

Whats with the epistle.
Summerize nwanne.

Decryption can be done by hacking an account.

emma4eva:
This is serious business. ..

Yeah, whatsapp just upped their game... it's the largest end to end encryption on a messaging platform, over 600 million encrypted users chatting.

in a few weeks when the service is turned on for iOS, BlackBerry and Windows Phone, it would be the largest end to end encryption service in the world with over a billion users.

Even as at now with just Android users encryption activated it's still the largest encrypted service.

StealthyMe:
And it can't be decrypted?

No it can't, it can only be decrypted from the users end, and not anywhere in between both users.

Good to be security conscious

Abbey2sam:


so you expect me (mua) to read all this shit tt

learn to summarise dude

The first two paragraphs basically explained pretty much the article, the other paragraphs only goes technical to explain the changes made.

My third post on the thread is a summary, take a look please, you accused way too early.

We af ear

and the NSA and all the other snoopy organisations would start searching for a way to crack it. #face to face z still the most secure joh

Richiy:
and the NSA and all the other snoopy organisations would start searching for a way to crack it. #face to face z still the most secure joh

It will be difficult to crack. the decrypting key is on the phone, and it changes for every new chat or session. Unlike past end to end encryption just one key does encryption and decryption, and in such a case once that key has been compromised the user's entire messages since usage of the chat can be decrypted, but with this type of encryption deployed by whatsapp, even when a key is compromised, it will only decrypt a few messages and not your entire chat history.

So you are safe @Richiy

u21day:


It will be difficult to crack. the decrypting key is on the phone, and it changes for every new chat or session. Unlike past end to end encryption just one key does encryption and decryption, and in such a case once that key has been compromised the user's entire messages since usage of the chat can be decrypted, but with this type of encryption deployed by whatsapp, even when a key is compromised, it will only decrypt a few messages and not your entire chat history.

So you are safe @Richiy

*lower jaw falls* I could only understand the last sentence. Not your fault though *grinning*

So what else ?

The most secured armor is to stay out of range.

Abbey2sam:


so you expect me (mua) to read all this shit tt

learn to summarise dude

you are the poo for quoting all his words and making me scroll lyk it's never gonna end

[size=38pt]what'sapp till 2020 non stop[/size]

Is this not the same whatsapp that has been infecting people's phones with virus via their latest update. I have hibernated my whatsapp using Droid wall until I am sure of the reliability. This encryption thingy is a good one anyways but I wonder what anyone will gain by peeping into my chats.

Richiy:


*lower jaw falls* I could only understand the last sentence. Not your fault though *grinning*

Ok, let me explain it better this way

Regular Chats is like writing a note and putting it in a box and sending to your friend.

Then regular end to end encryption is like writing a note and putting it in a box then use a padlock. this is safe but using the same padlock and key means once govt officials gets hit key, they can access all the boxes you sent.

now the end to end encryption used by whatsapp is different, it's like writing a note and putting in a box to send but always using a different padlock and key for every box sent. so if govt officials gets one key, they only have access to the specific boxes that key can open.

I hope this explanation helps @Richiy

akinsadeez:
Is this not the same whatsapp that has been infecting people's phones with virus via their latest update. I have hibernated my whatsapp using Droid wall until I am sure of the reliability. This encryption thingy is a good one anyways but I wonder what anyone will gain by peeping into my chats.

You are right, people might not gain much by peeping into your chats, I believe this applies also to a lot of users. However they definitely are some users who need their chats to stay truly confidential and away from monitoring by the govt.

Like in China and other nations where govt oppositions are prosecuted. @akinsadeez

Abbey2sam:


so you expect me (mua) to read all this shit tt

learn to summarise dude

Stop being Narcissistic, you're not that important.

I don't mind the development, I don't care if security agents read my messages or not, I have nothing to hide.