Protecting Signal Keys on Desktop

Share:
“A lone man in a desert trying to understand the inner workings of a computer in the style of Moebius”, by DALL-E.

At SandboxAQ, we recently delved into Signal Desktop to identify how its key management could be improved by using security hardware. Our analysis highlights the need for robust and consistent key isolation services across desktop platforms. In this blogpost,

  1. We analyse the security of Signal Desktop’s key management in light of recent attack reports, and
  2. We show how security hardware can protect Signal Desktop’s keys with a proof of concept (PoC)—a fork of Signal Desktop—and explore the tradeoffs with this approach.

Signal is an open-source messaging service that implements end-to-end encryption. Its users benefit from best-in-class privacy when communicating online.1 This level of privacy is made possible by the Signal protocol, considered the gold standard of end-to-end encrypted messaging. Its security protocol depends on cryptographic keys handled on-device. For mobile devices, Signal securely stores them in isolated and controlled locations. However, when it comes to desktop, Signal (just like everyone else) must do without OS-provided secure key management capabilities.

The problem

It all starts with a Twitter post explaining how an attacker running malware could extract all Signal Desktop’s confidential data and run a clone of the victim’s messaging application. This attack was possible because, although Signal encrypts the local database containing confidential data (including messages and keys), it stored the database decryption keys in plaintext.

Attack scenario

  1. Attacker gains access to the local Signal database encryption key. This can be accomplished through either (a) physical access to the disk at rest, bypassing disk encryption, or (b) malware operating with the victim’s privilege rights, like a malicious app.
  2. Attacker decrypts the database and extracts its data. Given that the database encryption was saved in plaintext, this process is straightforward.2
  3. Attacker impersonates the victim or compromises their messages. The compromised database contains the victim’s conversation history on this device and a set of keys used in the Signal protocol.

Here’s a visual representation of the attack vector.

Gaëtan Wattiau

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
4:52 am, Jul 8, 2025
weather icon 13°C
L: 12° | H: 14°
few clouds
Humidity: 77 %
Pressure: 1015 mb
Wind: 11 mph WNW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 20%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:53 am
Sunset: 9:17 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
12° | 14°°C 0.64 mm 64% 9 mph 78 % 1019 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
15° | 25°°C 0.13 mm 13% 7 mph 59 % 1022 mb 0 mm/h
Thu Jul 10 10:00 pm
weather icon
18° | 30°°C 0 mm 0% 8 mph 72 % 1023 mb 0 mm/h
Fri Jul 11 10:00 pm
weather icon
19° | 30°°C 0 mm 0% 10 mph 66 % 1022 mb 0 mm/h
Sat Jul 12 10:00 pm
weather icon
18° | 29°°C 0 mm 0% 11 mph 74 % 1020 mb 0 mm/h
Today 7:00 am
weather icon
12° | 13°°C 0.64 mm 64% 9 mph 78 % 1015 mb 0 mm/h
Today 10:00 am
weather icon
16° | 18°°C 0 mm 0% 9 mph 57 % 1017 mb 0 mm/h
Today 1:00 pm
weather icon
20° | 20°°C 0 mm 0% 7 mph 34 % 1018 mb 0 mm/h
Today 4:00 pm
weather icon
24° | 24°°C 0 mm 0% 7 mph 29 % 1017 mb 0 mm/h
Today 7:00 pm
weather icon
21° | 21°°C 0 mm 0% 7 mph 29 % 1018 mb 0 mm/h
Today 10:00 pm
weather icon
20° | 20°°C 0 mm 0% 4 mph 41 % 1019 mb 0 mm/h
Tomorrow 1:00 am
weather icon
17° | 17°°C 0 mm 0% 5 mph 48 % 1020 mb 0 mm/h
Tomorrow 4:00 am
weather icon
15° | 15°°C 0 mm 0% 4 mph 59 % 1021 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€91,940.01
-1.42%
Ethereum(ETH)
€2,160.48
-1.71%
Tether(USDT)
€0.85
-0.01%
XRP(XRP)
€1.93
-0.54%
Solana(SOL)
€126.80
-2.29%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.143031
-4.38%
Shiba Inu(SHIB)
€0.000010
-2.19%
Pepe(PEPE)
€0.000009
-3.38%
Scroll to Top