WhatsApp verschlüsselt jetzt Kontaktdatenbanken für datenschutzkonforme Synchronisierung

Teilen:

The WhatsApp messenger platform has introduced Identity Proof Linked Storage (IPLS), a new privacy-preserving encrypted storage system designed for contact management.

The new system solves two long-standing problems WhatsApp users have been dealing with for years, namely the risk of losing their contact lists if they lose their phone and the inability to sync contacts between different devices.

With IPLS, WhatsApp contact lists will now bind to the account rather than the device, allowing users to easily manage them between device changes or replacements.

Additionally, IPLS makes it possible to maintain different contact lists for multiple accounts on the same device, each securely managed and isolated from the rest.

A secure, encrypted system

IPLS achieves security through a combination of encryption, key transparency, and the use of Hardware Security Modules (HSMs).

When a new contact is added, the name is encrypted using a symmetric encryption key generated on the user’s device and stored in WhatsApp’s HSM-based tamper-resistant Key Vault.

When the user logs in on a new device, a secure session with the HSM-based Key Vault is established to retrieve the new contact by performing an authentication action using the cryptographic keypair linked to the user’s account (created upon registration).

How data exchange happens within the context of IPLS
How data exchange happens within the context of IPLS
Source: Meta

IPLS ensures that all contacts are encrypted end-to-end, meaning that contact data is encrypted on the user’s device and remains encrypted as it moves through WhatsApp’s systems, preventing interceptions at transit or access from rogue Meta employees.

WhatsApp also partners with Cloudflare for independent third-party auditing of its cryptographic operations, specifically, to act as a guarantor of updates to the Auditable Key Directory (AKD), signing each epoch and validating it hasn’t been tampered with.

WhatsApp publishes auditable proofs of consistency for the key directory’s updates (transitions between epochs) to a publicly accessible Amazon S3 instance, allowing users, researchers, and auditors to independently verify AKD’s integrity.

Overview of IPLS security
Overview of IPLS security
Source: Meta

Before IPLS and the underlying mechanisms were even presented to the public, WhatsApp contracted NCC Group to perform a security audit on the new system.

The most critical discovery of that audit was a flaw that allowed impersonation of the Marvell HSMs and decryption of the users’ secret key material, potentially exposing private contact metadata.

This problem, along with 12 flaws rated low to medium severity, were addressed by WhatsApp in September 2024, so they’re not present in the final release of IPLS.

Bill Toulas

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
12:14 am, Juli 1, 2025
Wetter-Symbol 24°C
L: 22° | H: 25°
klarer Himmel
Luftfeuchtigkeit: 68 %
Druck: 1014 mb
Wind: 5 mph S
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 0%
Regen Chance: 0%
Sichtbarkeit: 10 km
Sonnenaufgang: 4:47 am
Sonnenuntergang: 9:20 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 10:00 pm
Wetter-Symbol
22° | 25°°C 0 mm 0% 11 mph 68 % 1015 mb 0 mm/h
Tomorrow 10:00 pm
Wetter-Symbol
19° | 26°°C 0 mm 0% 12 mph 75 % 1024 mb 0 mm/h
Do. Juli 03 10:00 pm
Wetter-Symbol
14° | 26°°C 0 mm 0% 7 mph 53 % 1029 mb 0 mm/h
Fr. Juli 04 10:00 pm
Wetter-Symbol
16° | 28°°C 0 mm 0% 10 mph 47 % 1028 mb 0 mm/h
Sa. Juli 05 10:00 pm
Wetter-Symbol
16° | 21°°C 1 mm 100% 12 mph 90 % 1019 mb 0 mm/h
Today 1:00 am
Wetter-Symbol
22° | 24°°C 0 mm 0% 3 mph 68 % 1014 mb 0 mm/h
Today 4:00 am
Wetter-Symbol
21° | 23°°C 0 mm 0% 3 mph 67 % 1014 mb 0 mm/h
Today 7:00 am
Wetter-Symbol
22° | 23°°C 0 mm 0% 5 mph 63 % 1014 mb 0 mm/h
Today 10:00 am
Wetter-Symbol
28° | 28°°C 0 mm 0% 3 mph 44 % 1014 mb 0 mm/h
Today 1:00 pm
Wetter-Symbol
30° | 30°°C 0 mm 0% 6 mph 32 % 1014 mb 0 mm/h
Today 4:00 pm
Wetter-Symbol
34° | 34°°C 0 mm 0% 8 mph 26 % 1013 mb 0 mm/h
Today 7:00 pm
Wetter-Symbol
32° | 32°°C 0 mm 0% 11 mph 31 % 1013 mb 0 mm/h
Today 10:00 pm
Wetter-Symbol
25° | 25°°C 0 mm 0% 8 mph 46 % 1015 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€91,726.36
0.08%
Ethereum(ETH)
€2,141.69
2.99%
Fesseln(USDT)
€0.85
0.00%
XRP(XRP)
€1.95
4.59%
Solana(SOL)
€134.28
4.10%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.142338
1.58%
Shiba Inu(SHIB)
€0.000010
0.00%
Pepe(PEPE)
€0.000009
2.69%
Nach oben scrollen