Tuta Mail announced TutaCrypt, a new quantum-resistant encryption protocol , to secure communications from strong and expected decryption attacks.
See also: Royal Mail: Spent £10 million on cybersecurity measures after LockBi attack
Tuta Mail is an end-to-end encrypted email service , operating as an open source platform and boasting a user base of ten million people. The creator of this service, based in Germany , is actively committed to promoting secure cloud storage and file sharing solutions tailored for government use in the age of quantum computing.
Today, Tuta Mail announced the launch of TutaCrypt, a new protocol designed to protect communications being exchanged right now from 'harvest now, decrypt later' attacks.
These attacks collect encrypted data that cannot be decrypted at this moment, to be stored for the future when more powerful decryption methods become available.
TutaCrypt combines CRYSTALS-Kyber and X25519 for Elliptic-Curve-Diffie-Hellman key exchange.
Like other companies in the sector, such as Signal and Apple (iMessage), Tuta has chosen a hybrid model approach, combining advanced state-of-the-art quantum-safe algorithms with traditional algorithms to offer complete protection against current and future threats . AES 256/Argon2 encryption remains active, protecting messages from current threats.
See also: SubdoMailing: New spam campaign uses hacked company domains
TutaCrypt encryption creates two key pairs for Tuta Mail accounts: an X25519 key pair for ECDH and a Kyber-1024 key pair. These keys, which now replace the old RSA key pairs, are stored securely and encrypted on servers in Germany and are accessible on all of the user's devices.
TutaCrypt's current limitations concern ensuring message integrity and authenticity, as "classic" algorithms still handle these two aspects. Additionally, compromising long-term identity keys is a point of risk.
Cryptographically guaranteed authentication and various improvements to the protocol itself are part of Tuta's plans.
New Tuta Mail accounts will receive TutaCrypt upon creation, while existing users will receive the high-quality protocol over time. No action is required when switching to the new encryption algorithm.
See also: Royal Mail: Suspends its international services due to cyberattack
Quantum encryption, such as Tuta Mail's TutaCrypt, is a technique that uses the properties of quantum mechanics to achieve secure communication. In quantum encryption, encryption keys are created using quantum particles, such as photons. These keys are transmitted over a quantum channel. If an attacker tries to eavesdrop on the communication, the quantum channel will detect and report it. This process allows for the secure exchange of keys, which can then be used to encrypt and decrypt messages in a way that cannot be broken by classical encryption algorithms.
Source:
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
