Apple says there's a real risk that future quantum computers could be able to decrypt and read content sent via its iMessage app, so it developed a new protocol to combat the potential threat.

To create the new iMessage protocol, which is called PQ3, Apple says it rebuilt its cryptographic protocol "from the ground up" to redesign iMessage from a security standpoint. PQ stands for post-quantum, and Apple says PQ3 brings a third level of protection to its end users. It's also able to conceal the size of messages, the company says.

Content on iMessage is currently end-to-end encrypted, meaning messages from both the sender and receiver are encrypted so that not even Apple can view your messages.

"The rise of quantum computing threatens to change the equation," Apple's Security Engineering and Architecture (SEAR) team wrote Wednesday.

While some quantum computers already exist and are in use, the Technical University of Denmark said last year that such machines aren't that powerful yet. Researchers estimate that quantum computers may not be able to crack end-to-end encryption for years to come, mainly because current quantum computers simply aren't big enough.

"Even though they cant decrypt any of this data today, they can retain it until they acquire a quantum computer that can decrypt it in the future, an attack scenario known as Harvest Now, Decrypt Later," Apple's SEAR team says.

But Apple's proactive solution aims to alleviate such concerns. Apple will roll out PQ3 on iMessage to fully replace its existing protocol sometime this year. Once Apple users install the software update that includes PQ3, their messages will be protected by it going forward.

PQ3 will launch with iOS 17.4, which is expected in March, as well as iPadOS 17.4, macOS 14.4, and watchOS 10.4, according to Apple. This means Apple plans to add its next-gen security feature to all its devices that offer iMessage, from its iPhones to tablets, computers, and wearables.

Link:
Apple Ramps Up iMessage Security to Fight Looming Quantum Computing Threat - PCMag UK