Modern Intel and Arm CPUs expose cryptographic data to timing attacks, Eric Biggers, a software engineer at Google on the Platform Encryption Team, has highlighted in a series of discussions on mailing lists for the past months. Timing attacks against cryptography algorithms were discovered in the mid-90s and were proven practically at the start of …
Updated on 2023-01-09: Amazon S3 is Now Encrypting New Objects by Default Amazon Simple Storage Service (Amazon S3) now encrypts all new buckets by default. S3 will apply server-side encryption for all new objects unless users specify otherwise. Users can currently choose between three encryption options: S3 default encryption (SSE-S3, the new default), customer-provided encryption …
Updated on 2022-12-22: Client-side encryption for Gmail Google is adding E2EE support for Gmail’s web client. The feature is currently available for Google Workspace users via a beta program. Users allowed in the beta trial will be able to send and receive encrypted emails within and outside their email domain. It’s unclear when this will …
Last week Apple announced a number of new security improvements, including the ability for users to opt-in to End-to-End (E2E) encryption for iCloud backups. Law enforcement is, predictably, upset about this. These new features certainly have the potential to reignite the debate around lawful access to devices and user data. However, we think legislation and …
Updated on 2022-11-21: Quantum encryption deadline The Office of Management and Budget has ordered federal agencies to scan their systems and provide an inventory of assets containing cryptographic systems that could be cracked by quantum computers in the coming years. Agencies have a deadline until May 4, 2023, according to an OMB memo [PDF]. The …
Updated on 2022-11-20: Wickr nukes free version Wickr Me, the consumer end-to-end encrypted messaging service, will cease operating as of the end of 2022. Amazon, which bought Wickr in 2021, will keep its AWS enterprise version running. Wickr had a major problem with child abuse materials but did little to stop it. Read more: AWS …
Increased privacy concerns have led to greater use of encryption technology. SS8’s Enhanced Protocol Extraction Engine illuminates communications that are “going dark”, giving law enforcement visibility into targeted, encrypted communications to solve crimes faster. Learn more! Read this article to learn how innovative lawful interception solutions even the technological playing field for investigators. In the …
