Beyond End to End Encryption
summary
Examines how threat models for secure messaging have expanded beyond classic man-in-the-middle attackers by naming concrete attacker goals and capabilities against modern communication systems. Covers practical attacks and vulnerabilities against specific technologies—Telegram account hijacking in Iran, language detection in encrypted SMS, VoIP content recovery, HipChat server compromises, WhatsApp rekeying and browser attacks, Telegram and iMessage protocol issues, and risks from future quantum attacks—describing what capabilities attackers need and the potential impact.
AI-written summary · about
chapters (14)
- 0:00Start
- 5:29WHY E2E ENCRYPTION?
- 9:48ALICE, BOB & EVE
- 12:28WHAT ABOUT MALLORY?
- 17:43THREAT CATEGORIES
- 18:03LONG TERM SECURITY
- 20:12CLIENT COMPROMISE
- 25:46PAST & FUTURE ATTACKS
- 28:58AUTHENTICATION MECHANISM
- 31:45PHONE-BASED ATTACKS
- 34:33TRAFFIC ANALYSIS ON ENCRYPTED DATA
- 37:23MULTI-PARTY MESSAGING ATTACKS
- 39:44ATTACKS ON WEAK DESIGN
- 40:55LEGAL ATTACKS
related talks
14mPractical Attacks on a Decentralized Secure Messenger Session
47mSecure messaging - how to protect yourself & your company
29mSecuring your messaging networks: What needs protecting and how?
40mEnd-to-end encryption: Behind the scenes
42mSecurity of Push Messaging
32m(In)Secure Messaging Apps: A Lateral Movement Into Your Privacy
14mWhen Encryption Fails
43mKeynote: Crypto War 3 – from the DMA to Chatcontrol