Viber received end-to-end encryption by default
Viber authors went along the same paths with the WhatsApp developers and integrated full end-to-end encryption into their messenger, which means storing private encryption keys on users' devices. Unlike WhatsApp, which uses the implementation of the Double Ratchet algorithm from Open Whisper Systems (Signal) as the end-to-end encryption protocol, Viber authors wrote its implementation from scratch. At the same time, text messages sent between users, calls, and also sent files are encrypted. The feature is available to users starting with Viber 6.0.
To organize end-to-end encryption, each client uses a pair of keys: public and private. This key pair of the 256-bit encryption algorithm Curve-25519 (key ID) for a Viber client is generated when the messenger is installed on the main device. The public part of the key is sent to the Viber server, and the private part is stored on the client device to decrypt the incoming messages. Other devices that work with this Viber account also receive a copy of the private key from the main device using a special cryptographic algorithm.
')
Viber establishes a secure connection with all client devices when they want to exchange messages. This means that if one side of the messenger is installed on the main device, PC and tablet, and the other is also used on several devices, a secure connection will be established between each of the devices on opposite sides.
To use this encryption feature, users should upgrade their Viber application to the latest version.
For more information on Viber encryption, see www.viber.com/en/security-overview .
Starting with Viber 6.0, all of Viber's core features are secured with end-to-end encryption: group calls, one-on-one messages, group messages, media sharing and secondary devices. This means that it doesn’t even allow it to access the encryption keys. Viber's protocol uses the same concept of the “double ratchet” protocol, however, it is not necessary to use it.
To organize end-to-end encryption, each client uses a pair of keys: public and private. This key pair of the 256-bit encryption algorithm Curve-25519 (key ID) for a Viber client is generated when the messenger is installed on the main device. The public part of the key is sent to the Viber server, and the private part is stored on the client device to decrypt the incoming messages. Other devices that work with this Viber account also receive a copy of the private key from the main device using a special cryptographic algorithm.
')
Viber establishes a secure connection with all client devices when they want to exchange messages. This means that if one side of the messenger is installed on the main device, PC and tablet, and the other is also used on several devices, a secure connection will be established between each of the devices on opposite sides.
It is a good idea to send a message to the sender. So for example, if you’re a mobile phone, it’s not a problem.
To use this encryption feature, users should upgrade their Viber application to the latest version.
For more information on Viber encryption, see www.viber.com/en/security-overview .
Source: https://habr.com/ru/post/283010/
All Articles