WeChat devs introduced security flaws when they modded TLS, say researchers

October 17, 2024 at 04:41AM Researchers from the University of Toronto’s Citizen Lab found that WeChat’s modified cryptographic protocol, MMTLS, introduces security weaknesses. Key issues include the business-layer encryption not securing metadata and the potential for network-based attacks. The app lacks end-to-end encryption, allowing Tencent to access user messages, raising privacy concerns. ### Meeting Summary … Read more

NIST releases first encryption tools to resist quantum computing

August 14, 2024 at 03:38PM The U.S. National Institute of Standards and Technology (NIST) has unveiled three encryption standards to withstand potential cyber threats from quantum computing technology. Based on the meeting notes, the U.S. National Institute of Standards and Technology (NIST) has released the first three encryption standards specifically designed to withstand potential cyberattacks … Read more

NIST Finalizes Post-Quantum Encryption Standards

August 13, 2024 at 04:49PM The National Institute of Standards and Technology (NIST) published three new encryption algorithms as part of its post-quantum cryptography (PQC) standardization project to enhance global cybersecurity. FIPS 203 focuses on general encryption using CRYSTALS-Kyber, while FIPS 204 and 205 aim to protect digital signatures using CRYSTALS-Dilithium and Sphincs+, respectively. NIST … Read more

Zoom adds ‘post-quantum’ encryption for video nattering

May 21, 2024 at 03:49PM Zoom has introduced post-quantum end-to-end encryption (E2EE) for video conferencing, utilizing Kyber 768 to ensure data security against potential future quantum decryption. This advanced encryption will soon be available for Phone and Rooms. While enhancing security, it may limit some Zoom features, and individual users should assess their requirements before … Read more