Feb 22, 2024 10:40:00

Apple announces post-quantum encryption protocol 'PQ3' for iMessage built based on Kyber algorithm, released in March 2024 with iOS 17.4, iPadOS 17.4, macOS 14.4, watchOS 10.4

On February 21, 2024, Apple announced that it will introduce ``PQ3'', a ``post-quantum cryptographic protocol'', to protect messages from quantum computing attacks in its messaging service ``

iMessage ''. Deployment will begin in stages starting with iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4, which are scheduled to be released in March 2024.

Blog - iMessage with PQ3: The new state of the art in quantum-secure messaging at scale - Apple Security Research
https://security.apple.com/blog/imessage-pq3/

Apple Announces 'Groundbreaking' New Security Protocol for iMessage - MacRumors

https://www.macrumors.com/2024/02/21/apple-announces-imessage-security-upgrade/

PQ3 announced by Apple this time is 'Harvest now', which allows malicious attackers to collect large amounts of encrypted data and convert it into files with the hope that they can be decrypted using quantum computers that will reach a practical level in the future . , decrypt later (HNDL)' attacks.

PQ3 has a strong encryption protocol called 'Level 3' security, and Apple says, 'PQ3 is the first messaging protocol to reach what we call 'Level 3' security, a system that has been widely deployed. 'Protocol protections that exceed all other messaging apps available.'

Many existing messaging apps are classified as either Level 0, which has no end-to-end encryption and no quantum security by default, or Level 1, which has end-to-end encryption but no quantum security. Masu.

Level 2, which applies to the messenger app 'Signal,' applies post-quantum cryptography only to the initial key establishment, and provides quantum security under some conditions.

And Level 3, PQ3, is based on the

Kyber algorithm and applies post-quantum cryptography multiple times for both initial key establishment and ongoing message exchange, even if the key is at risk of leakage. It is said to have a function that can quickly and automatically restore the encrypted security of conversations.

Apple calls PQ3 'the most significant cryptographic security upgrade in iMeesage history.'

According to Apple, PQ3 will be rolled out in stages for supported iMessage starting with iOS 17.4, iPadOS 17.4, macOS 14.4, watchOS 10.4, scheduled for release in March 2024, and developers of these updates at the time of writing. It has already been introduced in the beta version. It has been announced that the visionOS installed in Apple Vision Pro will not support PQ3 at the time of initial release.

Additionally, Apple has announced that it plans to completely replace iMeesage's existing encryption protocol with PQ3 by the second half of 2024.