What is end-to-end encryption and why are tech companies focusing on it?

Source: The post is based on the article “What is end-to-end encryption and why are tech companies focusing on it?” published in The Hindu on 12th December 2022

What is the News?

Apple has announced it will be increasing the number of data points protected by end-to-end encryption on iCloud from 14 to 23 categories. 

The company claimed that with end-to-end encryption, user data will be protected even in case data is breached in the cloud.

What is end-to-end encryption?

End-to-end encryption is a communication process that encrypts data being shared between two devices. It prevents third parties like cloud service providers, internet service providers (ISPs) and cybercriminals from accessing data while it is being transferred. 

Process: The process of end-to-end encryption uses an algorithm that transforms standard text into an unreadable format. 

– This format can only be unscrambled and read by those with the decryption keys, which are only stored on endpoints and not with any third parties including companies providing the service.

Usage: End-to-end encryption is used to secure communications. Some of the popular instant-messaging apps that use it are Signal, WhatsApp, iMessage, and Google messages.

Why are tech companies going for end-to-end encryption?

Apple stated that the total number of data breaches has more than tripled between 2013 and 2021. Hence, it is trying to address this rising threat by implementing end-to-end encryption.

Moreover, the focus on end-to-end encryption seems to stem from the company’s desire to position itself as a provider of secure data storage and transfer services.

End-to-end encryption is also seen as a technology that secures users’ data from snooping by government agencies, making it a sought-after feature by activists, journalists, and political opponents.

Why are government agencies unhappy with end-to-end encryption?

The FBI in a statement has expressed displeasure at the idea of increasing the use of end-to-end encryption by technology companies. 

It said that while it remains a strong advocate of encryption schemes that give “lawful access by design”, that would enable tech companies “served with a legal order” to decrypt data. However, it continues to be deeply concerned with the threat end-to-end and user-only-access encryption pose.

Further in recent times, attempts have been made by governments across the globe to access encrypted data hosted and stored by tech companies.

For instance, in 2018 Australia passed laws that would force tech companies and service providers to build capabilities allowing law enforcement secret access to messages on platforms like WhatsApp and Facebook. This legislation according to government agencies was necessary to prevent “terrorists” and other serious criminals from hiding from the law.