Encrypted text messages may soon be on the way to some Android phones

CyanogenMod wants to roll out a encrypted text-message feature for Android phones to ensure that no one's peeking in on conversations.

Sometimes, it feels like the only way to have a private conversation these days is to plan for a clandestine meeting out in the desert.

If only our phones came with built-in text-messaging encryption to help ease our fears.

That's the idea behind CyanogenMod's encrypted text-messaging feature. The developers behind the custom version of Android announced today that a future version of its custom operating system will enable always-on, end-to-end text message encryption between users, essentially keeping the conversation strictly between you and the receiver.

To make this feature a possibility, Cyanogen partnered with Open Whisper Systems, the team behind open source apps like TextSecure, which secures texts and phone calls.  "We want everyone to have access to advanced secure communication methods that are as easy and reliable to use as making a normal phone call or sending a normal text message," Moxie Marlinspike, co-founder of Open Whisper Systems, wrote in a blog post.

The encryption feature will work with any text-messaging application, just as long as both parties are using CyanogenMod or Open Whisper System's TextSecure, which can be downloaded by any Android user regardless of whether or not they're employing CyanogenMod. If either parties aren't communicating through secure means--for instance, one person is sending a text message from a regular version of Android--then the text will be routed through as a normal SMS.

These days, it's hard to find any native texting applications that are capable of encrypting text messages. Apple iMessages, Google Hangouts, and even BlackBerry Messenger aren't secure enough to keep your conversations private. Open Whisper, on the other hand, utilizes perfect forward secrecy, which generates a new key for every message that's sent. So, if one key is compromised, only that one part of the message will be seen.

The algorithm used to encrypt the text messages was also developed independently from the one built by the National Institute of Standards and Technology (NIST), since that was weakened by the NSA.

What's behind the announcement

Monday's announcement is likely a ploy from Cyanogen to get more users on board so that it might meet its goal of becoming the number three mobile operating system. Regardless of whether or not the company succeeds in converting new users is another thing entirely, but Cyanogen's encrypted text-messaging abilities hopefully will influence other mobile companies to follow suit, especially with the recent wave of backlash against the major technology giants for failing to protect their users.

Cyanogen has begun testing the build that contains the new encrypted text-messaging features. Once it's ready, it will be deployed in all CM11 builds moving forward.

Join the CSO newsletter!

Error: Please check your email address.

Tags consumer electronicssecuritysmartphonescyanogenmodAndroidencryption

More about AppleBlackBerryGoogleMessengerNSATechnology

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Florence Ion

Latest Videos

  • 150x50

    CSO Webinar: Will your data protection strategy be enough when disaster strikes?

    Speakers: - Paul O’Connor, Engagement leader - Performance Audit Group, Victorian Auditor-General’s Office (VAGO) - Nigel Phair, Managing Director, Centre for Internet Safety - Joshua Stenhouse, Technical Evangelist, Zerto - Anthony Caruana, CSO MC & Moderator

    Play Video

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

More videos

Blog Posts

Market Place