https://research.nccgroup.com/2021/10/27/public-report-whatsapp-end-to-end-encrypted-backups-security-assessment/

Skip to content
NCC Group Research

NCC Group Research

Making the world safer and more secure

Menu

  * Privacy
  * Careers
  * Disclosure Policy
  * Technical Advisories
  * Public Reports
  * 2020 Research Report
  * Contact Us

Public Report - WhatsApp End-to-End Encrypted Backups Security
Assessment

Jennifer Fernick Cryptography, Public Report October 27, 2021 1
Minute

During the summer of 2021, WhatsApp engaged NCC Group's Cryptography
Services team to conduct an independent security assessment of its
End-to-End Encrypted Backups project. End-to-End Encrypted Backups is
an hardware security module (HSM) based key vault solution that aims
to primarily support encrypted backup of WhatsApp user data. This
assessment was performed remotely, as a 35 person-day effort by three
NCC Group consultants over the course of five weeks. NCC Group and
the WhatsApp team scheduled the retesting of findings, and
preparation of this public report a few weeks later, following the
delivery of the initial security assessment.

The Public Report for this review may be downloaded below:

NCC Group Public Report - WhatsApp End-to-End Encrypted Backups
Security AssessmentDownload

Share this:

  * Twitter
  * Reddit
  * LinkedIn
  * Facebook
  * 

Like this:

Like Loading...

  * Tagged
  * cryptography
  * HSM
  * Public Report
  * WhatsApp

[c0d21da7a9][c0d21da7a9]

Published by Jennifer Fernick

Jennifer Fernick is the Global Head of Research at NCC Group. She can
be found on Twitter at @enjenneer. View all posts by Jennifer Fernick

Published October 27, 2021

Post navigation

Previous Post Cracking RDP NLA Supplied Credentials for Threat
Intelligence
Next Post Technical Advisory - Apple XAR - Arbitrary File Write
(CVE-2021-30833)
%d bloggers like this: