Ramy Raoof’s Post

Finally. Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future. "As adversarial threats become more sophisticated, so does the need to safeguard user data," the company said in a statement. "With the launch of post-quantum E2EE, we are doubling down on security and providing leading-edge features for users to help protect their data." Zoom's post-quantum E2EE uses Kyber-768, which aims at security roughly equivalent to AES-192. Kyber was chosen by the U.S. Department of Commerce's National Institute of Standards and Technology (NIST) in July 2022 as the quantum-resistant cryptographic algorithm for general encryption. However, for post-quantum E2EE to be enabled by default, it requires all meeting participants to be on Zoom desktop or mobile app version 6.0.10 or higher. In the event some of the participants don't meet this minimum version requirement, standard E2EE will be used. https://lnkd.in/gZ6X4HEr

Google Introduces First Quantum Resilient FIDO2 Security Key Implementation Google on Tuesday announced the first quantum resilient FIDO2 security key implementation as part of its OpenSK security keys initiative. "This open-source hardware optimized implementation uses a novel ECC/Dilithium hybrid signature schema that benefits from the security of ECC against standard attacks and Dilithium's resilience against quantum attacks," Elie Bursztein and Fabian Kaczmarczyck said. OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards. The development comes less than a week after the tech giant said it plans to add support for quantum-resistant encryption algorithms in Chrome 116 to set up symmetric keys in TLS connections. It's also part of broader efforts to switch to cryptographic algorithms that can withstand quantum attacks in the future, necessitating the need to incorporate such technologies early on to facilitate a gradual rollout. "Fortunately, with the recent standardization of public key quantum resilient cryptography including the Dilithium algorithm, we now have a clear path to secure security keys against quantum attacks," the Mountain View-based company said. Similar to how Chrome's hybrid mechanism is a combination of X25519 and Kyber-768, Google's proposed FIDO2 security key implementation is a mix of Elliptic Curve Digital Signature Algorithm (ECDSA) and the recently standardized quantum resistant signature algorithm, Dilithium. The hybrid signature schema, developed in partnership with ETH Zürich, is a Rust-based memory-optimized implementation that only requires 20 KB of memory, making it ideal to run on security keys' constrained hardware. The company said it is "hoping to see this implementation (or a variant of it), being standardized as part of the FIDO2 key specification and supported by major web browsers so that users' credentials can be protected against quantum attacks."

Excited about the future of browser security with Google Chrome 124 release 🚀🔒🌐 Quantum-resistant X25519Kyber768 mechanism is here to enhance our online safety 💻🛡 Users experiencing some hiccups connecting to websites, but it's all for a good cause ⚙️ Quantum computing poses a threat to current encryption standards 🧩🔓 Google's proactive move ensures we stay ahead of potential security risks Quantum-resistant technology will become increasingly important as quantum computing advances 🌟 The X25519Kyber768 mechanism is a step in the right direction to safeguard our digital interactions 🔒 Excited to see how Chrome 124 paves the way for more secure browsing experiences 🛡💪 Quantum-resistance is the key to protecting our data and privacy online 🌐🛡 Let's embrace these advancements for a safer digital future #quantumsecurity #chrome124 #securitymatters #CyberSecurityAINews ----- Original Publish Date: 2024-04-28 12:03

Apple iMessage Elevates Privacy with PQ3 Encryption Apple iMessage takes a monumental leap forward in privacy protection with the integration of PQ3 encryption. PQ3 encryption, designed to withstand quantum computing threats, fortifies iMessage's already robust end-to-end encryption, ensuring unparalleled security for users' messages. Traditional encryption methods may falter against future quantum computing advancements, but PQ3 encryption ensures long-term protection against potential breaches. With iMessage's commitment to privacy, users can exchange messages with confidence, knowing their conversations are shielded by the most advanced encryption technology available. Apple's steadfast dedication to user privacy is evident in its refusal to compromise principles for convenience. By embracing emerging encryption technologies like PQ3, Apple sets a commendable precedent for the industry, prioritizing user privacy without sacrificing usability. As iMessage leads the charge with support for PQ3 encryption, it reinforces Apple's commitment to staying ahead of potential threats and ensuring user privacy remains paramount. With these advancements, the future of secure messaging looks brighter than ever. https://lnkd.in/ejihXNqc

“Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future.     "As adversarial threats become more sophisticated, so does the need to safeguard user data," the company said in a statement. "With the launch of post-quantum E2EE, we are doubling down on security and providing leading-edge features for users to help protect their data."     Zoom's post-quantum E2EE uses Kyber-768, which aims at security roughly equivalent to AES-192. Kyber was chosen by the U.S. Department of Commerce's National Institute of Standards and Technology (NIST) in July 2022 as the quantum-resistant cryptographic algorithm for general encryption.”    Although quantum computers are still experimental, they could eventually solve complex mathematical problems easily. This would make it simpler to break current encryption methods. The risk is heightened by a technique called "harvest now, decrypt later," where attackers save encrypted data now to decrypt it in the future when quantum computers are more powerful.    Quantum computers can solve complex problems much faster than classical computers. However, they also pose significant security risks to current encryption methods. Learn more about the news article and share your findings with us! https://lnkd.in/g_KKWcmD     #cybertronium #cybertroniummalaysia #zoom #quantumcomputing #encryption 

𝐢𝐌𝐞𝐬𝐬𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐏𝐐𝟑: The new state of the art in quantum-secure messaging at scale 🔐 The imminent rise of quantum computing poses a significant challenge to conventional encryption methods, potentially leaving our data vulnerable to unprecedented breaches. In response, Apple is stepping up its game with a groundbreaking solution. In the upcoming OS update, iMessage conversations will be fortified with a new post-quantum cryptographic protocol named PQ3. This cutting-edge technology not only adapts encryption algorithms to function on classical computers but also shields against potential quantum threats. Here’s a glimpse into how PQ3 operates and why it's crucial: 𝐇𝐨𝐰 𝐏𝐐𝟑 𝐖𝐨𝐫𝐤𝐬 Most messaging apps employ asymmetric encryption, utilizing public and private keys to secure communication. While this suffices for now, the specter of quantum computing demands proactive measures. Apple's PQ3 protocol introduces an additional layer of defense to safeguard key exchanges, minimizing the vulnerability of stored encrypted data. The rollout of PQ3 will be gradual, commencing with automatic migration of user conversations on compatible devices, followed by a complete transition later this year. While Apple deserves commendation for this proactive stance, it's worth noting that they're not alone in the race for post-quantum cybersecurity. Signal, for instance, has already integrated similar measures to bolster user security. 𝐈𝐦𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬 𝐟𝐨𝐫 𝐀𝐩𝐩𝐥𝐞 𝐔𝐬𝐞𝐫𝐬 PQ3 augments iMessage's encryption framework, offering an extra shield against quantum threats. However, as with any security measure, it's not foolproof. Expert opinions caution against overreliance on post-quantum technologies alone. Despite PQ3's resilience, other vulnerabilities persist, emphasizing the need for comprehensive device protection. In the words of Igor Kuznetsov from Kaspersky: "PQ3 offers protection at the transport layer, but it's not a panacea against all threats." In conclusion, while PQ3 marks a significant leap in cybersecurity, holistic security strategies remain paramount to safeguarding sensitive data. Sources: https://lnkd.in/deKxwT4w https://lnkd.in/dXYrRAk3  #Cybersecurity #Encryption #PQ3 #Apple #Innovation

We are now in the exciting early adopter phase of the post-quantum cryptography transition. The last year has seen some major developments. In November 2022, Google deployed post-quantum cryptography for internal communications (https://lnkd.in/et6g8_3S) and then by August 2023, post-quantum cryptography was being rolled out within the Chrome browser (https://lnkd.in/ek2cTrUe), marking a significant milestone in securing web traffic against the quantum threat. Concurrently, Cloudflare, which underpins a significant portion of the web, introduced PQ cryptography compatible with Chrome and announcer today that they  use it for internal communications and communication to origin servers (https://lnkd.in/e5Qb3475). This means by the end of this year, a substantial percentage of web traffic could be safeguarded by post-quantum cryptography using proposed standards by NIST (https://lnkd.in/eMb-dBqV)! The transition to post-quantum cryptography is not just a technological shift, but a critical step towards ensuring long-term data safety. As businesses, transitioning both internal and external-facing services to support post-quantum cryptography is imperative. NIST has provided insightful guidance for businesses on how to approach this transition: https://lnkd.in/eyxFAixY Having been personally involved in the realm of post-quantum cryptography for half a decade, it's been a rewarding journey to witness and contribute to the industry's evolution. My work with Cloudflare on its industry-leading transition to post-quantum cryptography has been one of the many high points in this endeavor. As the industry navigates through this transitional phase, I am open for consultations to share insights and help other organizations on this path. Feel free to connect via https://lnkd.in/ehWtWwAu. #PostQuantumCryptography #Cybersecurity #DataProtection #NIST #Google #Cloudflare #Chrome