Security Cryptography Whatever

WhatsApp Key Transparency with Jasleen Malvai and Kevin Lewi

May 6, 2023

55:43

AI Chapters

Episode notes

Introduction

3min

WhatsApp's Key Transparency Solution

2min

The Paradox of QR Code Scanning

2min

The Evolution of WhatsApp's Key Transparency Solution

2min

The Importance of Data Structure in Certificate Transparency

3min

The Merkle Tree Structure in Ethereum

2min

The Importance of Robust Infrastructure in Server-Side Protocols

4min

The Middle Ground Between Having to Check Every Efficient User

2min

How to Delete a User's WhatsApp Account

2min

10.

How to Audit a WhatsApp Data Structure

2min

11.

The Importance of Audit Proofs

2min

12.

WhatsApp Maintain Key Directory: A Third Party Auditing System?

2min

13.

How to Make WhatsApp Auto Proofs Work at WhatsApp Scale

2min

14.

The Challenges of Implementing Key Transparency

3min

15.

How to Authenticate a New Key to WhatsApp

2min

16.

The Drawbacks of Signature Chains

2min

17.

The Polynomial Cryptography

2min

18.

How to Roll Out Key Transparency in Your App

2min

19.

The Future of Certificate Transparency

2min

20.

WhatsApp's Leaks

2min

21.

How to Fix a Key Change in WhatsApp

2min

22.

The Future of Secure Cryptography

2min

23.

How to Use WhatsApp to Authenticate Users

2min

24.

The Importance of Key Transparency in WhatsApp

2min

25.

The Future of Key Transparency

2min

26.

WhatsApp Security White Paper

2min

WhatsApp has announced they’re rolling out key transparency! Doing this at WhatsApp-scale (aka billions and biiillions of keys) is a significant task, so we talked to Jasleen Malvai and Kevin Lewi about how it works.

Transcript:
https://securitycryptographywhatever.com/2023/05/06/whatsapp-key-transparency

Links:
https://engineering.fb.com/2023/04/13/security/whatsapp-key-transparency/
https://github.com/facebook/akd
Parkeet: https://eprint.iacr.org/2023/081.pdf
CONIKS: https://eprint.iacr.org/2014/1004.pdf
SEEMless: https://eprint.iacr.org/2018/607.pdf
WhatsApp Security Whitepaper: https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
Keybase key transparency: https://book.keybase.io/docs/server

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)