GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging

Avatar
The GSM Association (GSMA) has formally announced support for end-to-end encryption (E2EE) for securing messages sent via the Rich Communications Services (RCS) protocol, bringing much-needed security protections to cross-platform messages shared between Android and iOS platforms. To that end, the new GSMA specifications for RCS include E2EE based on the Messaging Layer Security (MLS) protocol

The GSM Association (GSMA) has formally announced support for end-to-end encryption (E2EE) for securing messages sent via the Rich Communications Services (RCS) protocol, bringing much-needed security protections to cross-platform messages shared between Android and iOS platforms.

To that end, the new GSMA specifications for RCS include E2EE based on the Messaging Layer Security (MLS) protocol via what’s called the RCS Universal Profile 3.0.

“The new specifications define how to apply MLS within the context of RCS,” Tom Van Pelt, technical director of GSMA, said. “These procedures ensure that messages and other content such as files remain confidential and secure as they travel between clients.”

This also means that RCS will be the first “large-scale messaging service” to have support for interoperable E2EE between different client implementations from different providers in the near future.

It’s worth noting that Google’s own implementation of RCS, used in the Messages app for Android, secures conversations using the Signal protocol to address the lack of built-in E2EE protections. That said, the encryption safeguards are currently limited to messages exchanged via the app, and not those exchanged with the iOS Messages users or users of other RCS clients on Android.

The development comes nearly six months after the GSMA said it was working towards implementing end-to-end encryption (E2EE) to secure messages sent between the Android and iOS ecosystems. The move followed Apple’s decision to roll out support for RCS in its own Messages app with iOS 18.

In July 2023, Google revealed that it intends to add support for MLS to its Messages service and open-source implementation of the specification.

“RCS continues to support a range of interoperable messaging functions between iOS and Android users, such as group messaging, the ability to share high-resolution media, and see read receipts and typing indicators,” Van Pelt said.

When reached for comment, Google said, “We’ve always been committed to providing a secure messaging experience, and Google Messages users have had end-to-end encrypted (E2EE) RCS messaging for years. We’re excited to have this updated specification from GSMA and work as quickly as possible with the mobile ecosystem to implement and extend this important user protection to cross-platform RCS messaging.”

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.

 The Hacker News 

Total
0
Shares
Previous Post

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Next Post

Alleged Israeli LockBit Developer Rostislav Panev Extradited to U.S. for Cybercrime Charges

Related Posts

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware

Opposition activists in Belarus as well as Ukrainian military and government organizations are the target of a new campaign that employs malware-laced Microsoft Excel documents as lures to deliver a new variant of PicassoLoader.  The threat cluster has been assessed to be an extension of a long-running campaign mounted by a Belarus-aligned threat actor dubbed Ghostwriter (aka Moonscape,
Avatar
Read More

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive trove of live secrets was discovered, reminding us that even the tools we rely on can hide risky
Avatar
Read More