After Criticism, Signal Agrees to Secure Plain-Text Encryption Keys for Users' Message Databases

News & Articles
1

Summary:

  1. Security Improvement: Signal is enhancing the security of its desktop client by encrypting the plain-text encryption keys used for its SQLite message database, addressing long-standing criticism.

  2. New Implementation: The update will utilize Electron’s SafeStorage API to store encryption keys securely in operating systems’ cryptography systems, such as DPAPI on Windows and Keychain on macOS.

  3. Response to Criticism: This change follows recent criticism from security researchers and a dormant merge request that prompted Signal to implement the new feature, which will be available soon in a Beta version.

Read more on BleepingComputer

1 Like