WhatsApp, the popular instant messaging system, has begun using a powerful new encryption program aimed at protecting users from hackers and unwanted government surveillance.
By partnering with Open Whisper Systems, an open-source project run by a group of software developers to make communication more secure, WhatsApp implement strong end-to-end encryption on all messages.
The messaging service, which has over 600 million active users sending billions of messages each day, is especially popular in Europe and Asia. Since hacking and breach of personal information are becoming a common thing today, WhatsApp's encryption for better privacy is long-awaited by many of its users.
The encryption, according to Open Whisper Systems, uses "TextSecure" program.
Whisper Systems that first created the TextSecure encryption program, was co-founded by researcher Moxie Marlinspike and roboticist Stuart Anderson. About a month after the company was acquired by Twitter, the TextSecure software was then released as free and open-source software. Since then, the software went under open development by the community. This continued work was named Open Whisper Systems. The project that is loosely run by developers, is designed to create easier encryption standards that companies can use to create more private messaging.
WhatsApp co-founder Jan Koum has a high concern regarding privacy. He said that he's deeply committed to user privacy because he grew up in the Soviet Union during the 1980s. He and his mother, as well as others, have had a long time assuming the authorities eavesdropping on their phone calls.
The rollout that began on November 18th, 2014, was described by the app maker as the "largest deployment of end-to-end encryption ever."
Despite criticism from some governments that say encryption would make the authorities less efficient in catching terrorists or other criminals, tech companies are slowly adopting data encryption overtime. And WhatsApp's move by partnering Open Whisper Systems marks another company that wants to give more confidence for users in using their product.
Google and Facebook encrypt users' email and messages while the data are transmitted through their networks so prying eyes can't get the hold of it to read. Furthermore, both Google with Android and Apple with iOS encrypt users' data when it's stored on their corresponding mobile devices. Although the companies are claiming their security systems are unbreakable to both hackers and NSA spies, experts in the field said that the encrypted data can still be scanned at certain points by the companies themselves, in event such as for commercial purpose of advertising for example.
Open Whisper Systems's TextSecure takes that encryption a step further.
The program is designed to make WhatsApp messages secured and unreadable by those other than the sender and the recipient. This means that Facebook, or even WhatsApp, can't read any of the encrypted messages even if they want to.
TextSecure software allows two devices to exchange encryption and decryption keys in a way that an eavesdropper and the TextSecure servers cannot crack.The software uses Curve25519, AES256, and HMAC-SHA256 to protect messages.
The software also provides perfect forward secrecy by using new AES keys for each message: if an attacker is able to decrypt one text, past messages cannot be cracked using that unique key.
The encryption feature is turned on by default.
The secured WhatsApp app was initially released for Android users since the TextSecure wasn't available for iOS yet. But Open Whisper said that it's working to make the feature available to iOS and mobile operating systems as well.
Encryption to Become a Norm
Technology companies in all sizes are moving slowly, but relentlessly, in better protecting their users' data from others that have no privilege. This step forward towards better user privacy and security is starting to become a norm.
To encrypt data, companies either need to put extra efforts in securing data by creating their own system capable to deliver that "unbreakable" encryption, or by acquiring companies that already have the technology, or partnering with third-parties that have the technical knowledge about it.
In the attempt, the companies are faced with orders from government, and may as well defend their decision. Government officials especially from the NSA and GCHQ, and also from the European Union, have all accused technology companies of hindering efforts against terrorism and crime by encrypting users' data.
The FBI even stated that encryption puts people "above the law".
Despite all those government's paranoia, in 2013, Whisper Systems had been given a sum of $455,000 from the U.S government to fund TextSecure.