Insecurities Of WhatsApp's, Signal's, And Threema's Group Chats

Recently, the theoretical and practical analysis of secure instant messenger protocols received much attention, but the focus of prior evaluations mostly lay in one-to-one communication. In this blog post we want to presents the results of our work that focuses on group chat protocols of three major instant messenger applications; namely Signal, WhatsApp, and Threema.

In this blog post, we aim to focus on the practical impact and the found weaknesses identified by our analysis. The interested reader may also look into our paper for more details.


Our Aim and What We Were Looking For

End-to-end encryption protects the confidentiality of communication that is forwarded via central servers to the designated receivers. As a consequence, neither parties on the network route of the messages, nor the provider of the central server (e.g. the WhatsApp server) should be able to read any information out of the observation of the communication. In particular, no other user of the application should have access to the communication. Further it might be desirable to require that also the messages' integrity is end-to-end protected and that a sender is informed about the delivery state of sent messages.
Delivery state information in Signal (upper screenshot) and WhatsApp (lower screenshot)

In a two party scenario, this analysis is rather fixed to two components of the protocol: the key establishment between both parties and the communication channel protection using the established key (mostly consisting of an encryption algorithm and a scheme for providing integrity like MACs or signature schemes).

Regarded attackers


In a group setting, the same attackers apply (network, provider, other users). However the requirements for secure communication differ. It is further necessary that only group members can write to and read content from the group. Additionally, only administrators of the group are able to add new members.

In addition to these standard requirements, we also evaluated the protocols' security guarantees if the client's secrets were revealed (forward secrecy and future secrecy).

Our Approach

We analyzed the mentioned protocols by reading the source code and debugging the apps. We also used alternative open source implementations of Threema and WhatsApp as a help and we traced the network traffic. When using alternative implementations, we only took incoming traffic into account, which was generated by official applications. Thereby we extracted the protocol descriptions and evaluated them regarding the defined requirements.

Our Findings

In WhatsApp and Threema, the provider was able to manipulate the set of members. Threema only allowed the provider to rewind the set of members to a previous state. As a consequence previously removed members could have been added to the group again. The WhatsApp provider is able to arbitrarily manipulate the member set. Thereby further members and administrators can be added to the group. Since the authenticity of group manipulation is not protected, the WhatsApp provider can set the real group administrator as the source of manipulation even though this administrator was not active.

Since Signal's key exchange protocol provides future secrecy, we also evaluated the protocol's ability to recover into a secure group state after a member's state was compromised. The essential weakness here is that a sender only needs to know the static group ID to send a message to the group. If a group member receives a message with the correct group ID, no verification regarding the current member set takes place but the message is directly added to the group communication. Consequently it is sufficient to retrieve the group ID in order to send messages to the group. Since Signal treats content messages the same way as messages for the manipulation of the group set, an attacker who knows the group ID can add herself to the group and thereby read the subsequent group communication.

In addition to this, in all cases the delivery state of sent messages was not securely provided. Threema's group chats do not inform the sender about the delivery state while Signal and WhatsApp do not protect the delivery information on the end-to-end layer. Therefore the central provider can forge this information and drop messages without letting the communicating parties detect this.

Also the order of messages was manipulable for the providers of the applications such that the provider is able to deliver the messages in a different order than they were sent. Threema's weakness of rewinding a group state results from missing replay attack protection.

Impact of Weaknesses

Even though end-to-end encryption is implemented in all analyzed applications, the central providers can largely manipulate the communication in groups and partially also read it.
In all applications, the provider can undetectably drop and reorder messages during the delivery and thereby manipulate the view of the communication such that further attacks can be obfuscated.
The central servers of WhatsApp can be used to add arbitrary users to groups and thereby receive their communication.
To achieve the same result for Signal, it suffices to retrieve the group ID. An earlier member who left the group once still knows this ID since it is static. However, in contrast to WhatsApp, the origin of the manipulation is correctly displayed in the Signal application (which was not the fact when we started our analysis).

As a result, the end-to-end protection of WhatsApp is not sufficient to reach confidentiality in groups. For Signal no future secrecy is reached in groups and Threema was vulnerable to replay attacks which resulted in further weaknesses.

Responsible Disclosure

We disclosed our findings to the developers and received varying response. Threema updated their protocol in version 3.14 such that our attacks are not feasible anymore. Moxie Marlinspike responded that Signal is "working on an entirely new group mechanism that we should be deploying soon". WhatsApp did not hold out the prospect of fixing the described vulnerabilities (Update 01/18: According to Facebook's Security Head, the invite links make a fix more difficult [1]; we proposed a way to solve this issue [2]).

[1] https://twitter.com/alexstamos/status/951169036947107840
[2] https://web-in-security.blogspot.de/2018/01/group-instant-messaging-why-baming.html

Related links


  1. What Are Hacking Tools
  2. Easy Hack Tools
  3. Hacking Tools Online
  4. Hacker Tools Github
  5. Hacker Tools For Pc
  6. Tools For Hacker
  7. Pentest Tools Framework
  8. Pentest Tools Bluekeep
  9. Pentest Tools Subdomain
  10. Hacker Tools
  11. Pentest Tools For Mac
  12. Hacker Security Tools
  13. Hacker Tools Linux
  14. Hacker Tools List
  15. Hack Tools 2019
  16. Hacking Tools For Windows Free Download
  17. Pentest Tools Framework
  18. Free Pentest Tools For Windows
  19. Hacker Tool Kit
  20. Hacking Tools Mac
  21. Easy Hack Tools
  22. Hacking Tools For Beginners
  23. Pentest Tools For Ubuntu
  24. Hack Tool Apk
  25. Hack Tools For Windows
  26. Pentest Tools Website
  27. Hack Tools Online
  28. Hacking Tools Name
  29. What Is Hacking Tools
  30. Hacker Tools
  31. Pentest Tools Subdomain
  32. Pentest Tools Windows
  33. Pentest Tools For Windows
  34. Hack App
  35. Best Hacking Tools 2019
  36. Easy Hack Tools
  37. Hacker Tools List
  38. Hacker Tools List
  39. Hack Tools For Mac
  40. Pentest Tools Website Vulnerability
  41. Hack Tool Apk
  42. Pentest Tools Nmap
  43. Pentest Tools Online
  44. Android Hack Tools Github
  45. Physical Pentest Tools
  46. Physical Pentest Tools
  47. Hacker Tools Github
  48. Hacking Tools Download
  49. Hacks And Tools
  50. Physical Pentest Tools
  51. Hacker Tools Free Download
  52. What Is Hacking Tools
  53. Hack Tools
  54. Hacker Tools For Mac
  55. Hacking Tools For Kali Linux
  56. What Is Hacking Tools
  57. Pentest Tools Windows
  58. Hacking Tools For Windows Free Download
  59. Pentest Tools Linux
  60. Pentest Tools Android
  61. Hacker Tools 2019
  62. Nsa Hack Tools Download
  63. Hacker Tools Apk Download
  64. Pentest Tools Open Source
  65. Hack Tool Apk
  66. Hacker Tools Apk Download
  67. Hacker Tools Online
  68. How To Make Hacking Tools
  69. Pentest Recon Tools
  70. Hack Rom Tools
  71. What Is Hacking Tools
  72. Pentest Box Tools Download
  73. Hacker Tools 2020
  74. Hacker Hardware Tools
  75. Beginner Hacker Tools
  76. Blackhat Hacker Tools
  77. Hack Tools For Windows
  78. Pentest Tools For Windows
  79. Hacking Tools For Games
  80. Pentest Box Tools Download
  81. Pentest Recon Tools
  82. Hacking Tools Windows
  83. Black Hat Hacker Tools
  84. Hacker Tools List
  85. Pentest Reporting Tools
  86. Hack Tools Github
  87. Hack Apps
  88. Hacking Tools Usb
  89. Hack Tools 2019
  90. Hack And Tools
  91. Bluetooth Hacking Tools Kali
  92. Hack Tools Pc
  93. Underground Hacker Sites
  94. Hacking Tools 2020
  95. Hacker Tools Hardware
  96. Hacker Tools 2020
  97. Pentest Tools Alternative
  98. Best Hacking Tools 2019
  99. Hacker Tools Hardware
  100. Hacks And Tools
  101. Hacking Apps
  102. How To Install Pentest Tools In Ubuntu
  103. Black Hat Hacker Tools
  104. Hacking Tools Pc
  105. Pentest Tools Alternative
  106. Hacking Tools And Software
  107. Hacking Tools
  108. New Hacker Tools
  109. How To Hack
  110. Easy Hack Tools
  111. Wifi Hacker Tools For Windows
  112. Hacker Tools For Mac
  113. Hacking Tools For Pc
  114. New Hack Tools
  115. Hacker Tool Kit
  116. Hacking Tools Kit
  117. Hacker Tools Apk
  118. Hacking Tools Pc
  119. What Are Hacking Tools
  120. Hacker Search Tools
  121. Game Hacking
  122. Hacker Tools Github
  123. Hack Tools Online
  124. Pentest Tools Find Subdomains
  125. Hacking Tools For Kali Linux
  126. Hack Tools Mac
  127. Hackrf Tools
  128. Growth Hacker Tools
  129. Hacker Tools Software
  130. Pentest Tools Subdomain
  131. Pentest Tools Port Scanner
  132. Hacker Tools Free
  133. Hacking Tools Mac
  134. Hacking Tools For Beginners
  135. Hacking Tools Free Download
  136. Pentest Tools Android
  137. Hacker Tools Software
  138. Pentest Tools Android
  139. Hacking Tools For Mac
  140. World No 1 Hacker Software
  141. Hacking Tools Online
  142. Pentest Tools Nmap
  143. Usb Pentest Tools
  144. Tools Used For Hacking
  145. Hacker Tools Linux
  146. Hack Tools Pc
  147. Hacking Tools 2019
  148. Pentest Tools Bluekeep
  149. Hacker Tools
  150. Hack Tools Pc
  151. Hacking Tools
  152. Pentest Tools Website Vulnerability
  153. Hacker Tools Github
  154. Kik Hack Tools
  155. Hacking Tools For Beginners
  156. Hacker Tools Github
  157. Physical Pentest Tools
  158. Hacker Tools For Ios
  159. Hack Tools For Pc
  160. Black Hat Hacker Tools
  161. Hack Tools For Mac

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Labels

14.6.2014 draw 297/14 19 Mei 2013 23 Jun 2013 24.04.2013 25 Jun 2013 4 mei 2014 - draw 278/14 6 mei 2014 Adakah anda bersetuju dengan pernyataan tentang zakar ini? BERIKUT MERUPAKAN NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 30 OGOS 2014 draw 143/13 draw 279/14 DRAW ID 098/13. DRAW ID 099/13: NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 4 MEI 2013 DRAW ID 139/13. DRAW ID 141/13. DRAW ID 142/13 DRAW ID 142/13 / PREDICTION FOR MAGNUM 4D COUNTER ON 3 AUGUST 2013 ID CABUTAN 098/13 / PREDICTION FOR MAGNUM 4D COUNTER ON 1 MAY 2013 ID CABUTAN 099/13 / ID CABUTAN 139/13 / PREDICTION FOR MAGNUM 4D COUNTER ON 27 JULY 2013 ID CABUTAN 141/13 / PREDICTION FOR MAGNUM 4D COUNTER ON 31 JULY 2013 Keputusan dan perbandingan antara nombor ramalan dan result Magnum 4D pada 31 Julai 2013 Keputusan Magnum 4D Kerja part time/ sambilan : Peluang tambah pendapatan Magnum 4d result 1 May 2013 Draw 098/13 Magnum draw 094/13 nombor 4d 6.7.2014 308/14 Nombor 4d untuk hari ini : 21/04/2013 nombor magnum 4d draw 107/13 ; Ahad nombor magnum 4d untuk draw 101/13: 7 mei 2013 ( magnum 4d prediction number for draw 101/13 : 7 may 2013 Nombor ramalan 4d : 24.04.2013 Nombor ramalan dan keputusan Magnum 4D draw 119/13 pada 15 Jun 2013 Nombor ramalan Magnum 4D 4 Ogos 2013 draw 143/13 Nombor ramalan Magnum 4D 7 Ogos 2013 draw 144/13 nombor ramalan Magnum 4D dan result pada 4 Ogos 2013 Nombor ramalan magnum 4d draw 112/13 29 Mei 2013 Nombor ramalan Magnum 4D pada 1 Jun 2013 draw 113/13 nombor ramalan magnum 4d pada 14.6.2014 draw 297/14 Nombor ramalan Magnum 4D pada 2 Jun 2013 Draw 114/13 nombor ramalan magnum 4d pada 23 ogos 2014 draw 329/14 Nombor ramalan magnum 4d pada 26.05.2015 draw 467/15 - special draw Nombor Ramalan Magnum 4D pada 30 April 2014 draw 276/14 nombor ramalan magnum 4d pada 30 ogos 2014 draw 333/14 nombor ramalan magnum 4d pada 4 mei 2014 - draw 278/14 Nombor ramalan magnum 4d pada 5 julai 2014 hari sabtu draw 307/14 nombor ramalan magnum 4d pada 7 september 2014 draw 338/14 ( 7.9.2014/338/14) nombor ramalan magnum 4d pada 8 Februari 2014 (8/2/2014) draw 235/14 nombor ramalan magnum 4d pada hari ahad nombor ramalan magnum 4d pada hari ahad 6 julai 2014 draw 308/14 nombor ramalan magnum 4d pada hari rabu 25 september 2013 draw 168/13 nombor ramalan magnum 4d pada hari rabu 9 julai 2014 draw 309/14 nombor ramalan magnum 4d pada hari sabtu nombor ramalan magnum 4d pada hari sabtu 13.9.2014 draw 340/14 nombor ramalan magnum 4d pada hari sabtu 26 oktober 2013 draw 182/13 nombor ramalan magnum 4d pada hari selasa Nombor ramalan Magnum 4D untuk draw 118/13 pada hari Rabu 12 Jun 2013 Nombor ramalan Magnum 4D untuk draw 119/13 pada hari Sabtu 16 Jun 2013 Nombor ramalan Magnum 4D untuk draw 120/13 pada hari Ahad 16 Jun 2013 Nombor ramalan Magnum 4D untuk draw 121/13 pada hari Rabu 19 Jun 2013. Nombor ramalan Magnum 4D untuk draw 123/13 pada hari Ahad Nombor ramalan Magnum 4D untuk draw 124/13 pada hari Selasa (special draw) Nombor ramalan Magnum 4D untuk draw 231/14 pada hari Sabtu 1 Februari 2014 Nombor ramalan Magnum 4D untuk hari Sabtu 7 Ogos 2013 draw 149/13 Nombor ramalan Magnum 4D untuk hari Selasa 3 September 2013 draw 158/13 | SPECIAL DRAW Nombor ramalan MAGNUM 4D untuk special draw 111/13 28 Mei 2013 Nombor ramalan untuk hari Rabu nombor ramalan untuk MAGNUM 4D Nombor ramalan untuk magnum 4d draw 105/13: 15 Mei 2013 Nombor ramalan untuk magnum 4d draw 120/13 dan keputusan/result magnum 4d pada 16 Jun 2013 NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 1 MEI 2013 NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 27 JULAI 2013 NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 3 OGOS 2013 NOMBOR RAMALAN UNTUK MAGNUM 4D PADA 31 JULAI 2013 nombor ramalan untuk magnun 4d pada 3 mei 2014-277/14 nombor untuk magnum 4d draw 095/13 : 27 April 2013 PREDICTION FOR MAGNUM 4D ON 4 MAY 2013 ramalan magnum 4d 9.7.14 309/14 Ramalan pada 12 Jun 2013 dan keputusan Magnum 4D Result 21.4.2013 Cash Sweep Result 21.4.2013 DaMaCai Result 21.4.2013 Magnum Result 21.4.2013 Toto special draw 28 Mei 2013 special draw pada 28 MEI 2013. TERKINI| TERBARU: nombor magnum 4d 7 mei 2013; 101/13 ; special draw Toto draw 3871/13

**Penafian**

Nombor ramalan hanyalah sebagai panduan dan dicadangkan untuk MAGNUM SAHAJA (atau kaunter lain sekiranya sesuai) . Segala pertaruhan adalah atas risiko anda sendiri.