Skype Adopts Signal Protocol for End-to-End Encryption

In a new Private Conversations feature, Skype is leveraging the widely-used Signal protocol for end-to-end encryption.

Skype is partnering with Signal for end-to-end encryption in a new feature it is calling Private Conversations.

Using the open source Signal Protocol, the Private Conversations feature and end-to-end encryption is now available in preview for Skype Insiders. According to Skype, a Private Conversation has limited capabilities, including no support for groups, and the inability to edit a message or forward a file. Private Conversations are device-specific, and preview messages will not show in Chats or notifications.

The Skype Insiders program was launched in 2016 for testers to evaluate new features before they are rolled out platform-wide.

With more than one billion users, the Signal Protocol is integrated into other messaging platforms as well, including WhatsApp, Google and Facebook. According to Signal, the protocol “ensures that new AES keys are used for every single message, and it provides Signal with both forward secrecy and future secrecy properties. The Signal Protocol also features enhanced deniability properties that improve on those provided by OTR, except unlike OTR all of these features work well in an asynchronous mobile environment.”

In November, researchers assessed the strength of the Signal protocol, coming to the conclusion that “several standard security properties are satisfied by the protocol” with no major flaws in the design, which the researchers called “very encouraging.”

This week, researchers at the Real World Crypto security conference in Switzerland presented findings around flaws in WhatsApp end-to-end encryption where “anyone who controls WhatsApp’s servers could effortlessly insert new people into an otherwise private group, even without the permission of the administrator who ostensibly controls access to that conversation,” as reported by WIRED

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.