Lawsuit alleges WhatsApp encryption is deceiving; cryptography expert provides insights

WhatsApp, a widely-used messaging app, prides itself on ensuring end-to-end encryption (E2EE), which guarantees that only chat participants can decrypt the data. The founders of WhatsApp, Jan Koum and Brian Acton, built the app around this principle, despite scrutiny from governments and law enforcement worried about not having access to the content.

Recently, a class-action lawsuit has raised doubts about WhatsApp’s claims of E2EE. The lawsuit alleges that Meta, the current owner of WhatsApp, can access and monitor the encrypted messages sent or received by users, directly contradicting their previous pledge of privacy.

According to the lawsuit, WhatsApp and Meta have a process in place that allows workers to access encrypted communications through a simple internal request to Meta engineers. Once approved, Meta employees can view users’ messages in real-time and access them from the users’ account activation, including deleted messages.

Professor Matthew Green from Johns Hopkins University, a cryptographer, has shared his insights on this matter. While WhatsApp’s encryption is based on the Signal protocol, the lack of open-source code makes it challenging for independent researchers to verify the implementation process. Green acknowledges the complexity of analyzing the encryption code but finds it improbable that WhatsApp would engage in such deception due to the potential consequences.

Despite the allegations in the lawsuit, Green believes that trust is essential in the absence of concrete evidence proving WhatsApp’s deceit. He references Ken Thompson’s reflections on trust in the tech industry, emphasizing that assuming WhatsApp’s good faith allows communication with millions of users, echoing Apple’s closed-source policies for iMessage and FaceTime.

In response to the lawsuit’s accusations, Apple tech news site 9to5Mac dismisses the claims as lacking evidence and speculates that it would be a monumental lie by both WhatsApp and Meta’s founders. The article alludes to the impracticality of such widespread deception within a company, citing the adage “Three may keep a secret, if two of them are dead.”

Ultimately, the lawsuit raises significant concerns about privacy and transparency in the tech industry, highlighting the importance of trust between users and service providers. As the legal battle continues, users must decide whether to maintain trust in WhatsApp’s encryption claims or consider alternative messaging platforms.