Apple has made a before and after in the history of cybersecurity with the announcement of PQ3, its new post-quantum cryptography protocol specifically designed for iMessage. A significant breakthrough in the protection of digital communications that sets a new security standard, surpassing by far all other existing protocols in commercial messaging applications.
A leap towards future security
With the slow but inexorable arrival of the enormous potential of quantum computers, conventional cryptographic protocols based on complex mathematical problems could be compromised. These future computers promise exponentially greater computing power than even supercomputers can currently provide, making them capable of breaking cryptographic measures that are considered practically indestructible with current machines.
This is where Apple’s PQ3 protocol comes into play. Designed to be resistant to attacks from future quantum computers, PQ3 anticipates and protects iMessage communications against the attack known as “Harvest now, decrypt later.” This type of attack is based on the collection and storage of large volumes of encrypted data, currently inaccessible, with the hope of decrypting it in the future, once quantum computers become available. According to Apple, given the reduction in data storage costs, this threat is more real than we might imagine.
Apple describes PQ3 as the messaging protocol with the most robust security properties in the world, capable of guaranteeing security both in the initial key establishment and in the continuous exchange of messages. With it, iMessage will not only be invulnerable to current attacks, but also to future ones.
The implementation of PQ3 will gradually begin in March, with the updates of iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4, and it is already present in the latest beta versions of these updates. Apple plans to completely replace the current cryptographic protocol of iMessage with PQ3 in all compatible conversations throughout the year. However, this requires that all devices in the conversation are updated, at least, to the mentioned software versions.
Apple’s move towards post-quantum cryptography with PQ3 is undoubtedly great news. At a time when privacy and security of digital communications are becoming increasingly critical, initiatives like these – partly made possible by the fact that DMA will not affect iMessage – are essential to protect personal and corporate information that passes through these services. Although quantum computers are still mainly in the theoretical realm, preparing against their potential threats is a prudent maneuver. One that not only secures the present of iMessage, but also safeguards its future, marking a milestone in the evolution of security in our communications.
