Application Security and Permissions
How WhatsApp is enabling end-to-end encrypted backups

How WhatsApp is enabling end-to-end encrypted backups

9/10/2021 · Slavik Krassovsky, Gabriel Cadden

What this post added

Introduced end-to-end encrypted (E2EE) backups for WhatsApp, developing a new system for encryption key storage that works with both iOS and Android. This system generates a unique, randomly generated encryption key for backups, which users can secure manually or with a password. When a password is used, the key is stored in an HSM-based Backup Key Vault, which enforces password verification attempts and renders the key inaccessible after a limited number of unsuccessful attempts. The HSM-based Backup Key Vault is geographically distributed across multiple data centers for high availability and reliability.

Read the original post ↗