GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging

Avatar
The GSM Association (GSMA) has formally announced support for end-to-end encryption (E2EE) for securing messages sent via the Rich Communications Services (RCS) protocol, bringing much-needed security protections to cross-platform messages shared between Android and iOS platforms. To that end, the new GSMA specifications for RCS include E2EE based on the Messaging Layer Security (MLS) protocol

The GSM Association (GSMA) has formally announced support for end-to-end encryption (E2EE) for securing messages sent via the Rich Communications Services (RCS) protocol, bringing much-needed security protections to cross-platform messages shared between Android and iOS platforms.

To that end, the new GSMA specifications for RCS include E2EE based on the Messaging Layer Security (MLS) protocol via what’s called the RCS Universal Profile 3.0.

“The new specifications define how to apply MLS within the context of RCS,” Tom Van Pelt, technical director of GSMA, said. “These procedures ensure that messages and other content such as files remain confidential and secure as they travel between clients.”

This also means that RCS will be the first “large-scale messaging service” to have support for interoperable E2EE between different client implementations from different providers in the near future.

It’s worth noting that Google’s own implementation of RCS, used in the Messages app for Android, secures conversations using the Signal protocol to address the lack of built-in E2EE protections. That said, the encryption safeguards are currently limited to messages exchanged via the app, and not those exchanged with the iOS Messages users or users of other RCS clients on Android.

The development comes nearly six months after the GSMA said it was working towards implementing end-to-end encryption (E2EE) to secure messages sent between the Android and iOS ecosystems. The move followed Apple’s decision to roll out support for RCS in its own Messages app with iOS 18.

In July 2023, Google revealed that it intends to add support for MLS to its Messages service and open-source implementation of the specification.

“RCS continues to support a range of interoperable messaging functions between iOS and Android users, such as group messaging, the ability to share high-resolution media, and see read receipts and typing indicators,” Van Pelt said.

When reached for comment, Google said, “We’ve always been committed to providing a secure messaging experience, and Google Messages users have had end-to-end encrypted (E2EE) RCS messaging for years. We’re excited to have this updated specification from GSMA and work as quickly as possible with the mobile ecosystem to implement and extend this important user protection to cross-platform RCS messaging.”

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.

 The Hacker News 

Total
0
Shares
Previous Post

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Next Post

Alleged Israeli LockBit Developer Rostislav Panev Extradited to U.S. for Cybercrime Charges

Related Posts

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform has come under active exploitation in the wild to deploy backdoors and cryptocurrency miners. Cloud security firm Wiz said it's currently responding to "multiple incidents" involving the weaponization of CVE-2024-50603 (CVSS score: 10.0), a maximum severity bug that could result in
Avatar
Read More

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT. The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China. "This actor has increasingly targeted key roles
Avatar
Read More