Reuters has revealed that Apple will not implement end-to-end encryption for backups iCloud. The decision was made after an FBI. Apple had planned to use encryption on iCloud, as it does on iPhones and iPads. However, that will not happen.
iCloud data is encrypted by default, but Apple has the ability to decrypt it if necessary. For example, if an iCloud user can't access their account for any reason, Apple has the ability to decrypt the contents of their iCloud library. This is how Tim Cook justified Apple's ability:
"We do this because some users lose or forget their key and then expect help from us to get data back."
However, in recent years, Apple has been considering implementing end-to-end encryption, which prevents access even if there is a court order. About two years ago, Apple told the FBI about its plans for iCloud.
Apple's goal was to provide greater protection for users . Encryption would create more barriers for hackers. However, after that, no one would be able to access the encrypted data. Not even Apple. However, this means that authorities would not be able to see the data and accounts of criminals and other users, which often happens in police investigations and is very helpful.
In the end, Apple decided not to adopt end-to-end encryption.
We don't know exactly whether the FBI convinced Apple or if it was the company. What is certain is that Apple can hand over personal user data to authorities if there is a court order.
What does Google have to do with all this?
In 2018, Google implemented end-to-end encryption for Android backups, using the Titan security chip, which ensures data security. This system ensures that only you have access to your data, and if you lose the device (e.g. your phone), no one will be able to access your information because Google does not have the decryption key.
How does this system work?
Android Pie: There is a new feature where backed-up data can only be decrypted with a randomly generated key. This decryption key is encrypted using the user's PIN/passcode, which Google does not know. It is then encrypted on the Titan security chip.
The Titan chip provides the backup decryption key only when the correct passcode is used. The Titan chip monitors every attempt to access the decryption key. Therefore, if there are too many incorrect attempts to enter the passcode (as occurs in brute force attacks), the chip blocks access to protect the data.
Essentially, your phone's PIN or passcode acts as the decryption key for Titan. Without it, there's no access to your data. So Google, unlike Apple, offers the end-to-end encryption that anyone could want. However, the encryption doesn't apply to data in Google Drive.
