ProtonBlog
protonmail-openpgpjs-protonmail-security-audit

Proton Mail’s open-source encryption library, OpenPGPjs, has passed an independent security audit

At Proton Mail, our goal is to make encryption as widespread and accessible as possible. We believe a key step toward that is having well-maintained, robust, and secure open source encryption libraries(new window). This is the goal of our efforts on the OpenPGPjs encryption(new window) library, which is today used by hundreds of applications (including Proton Mail) serving millions around the world. As the maintainer of OpenPGPjs, we are responsible for making sure the library is up to date and secure, as well as offering basic support to developers who wish to use it.

In March 2018, we released Version 3.0 of OpenPGPjs(new window). With this major update, OpenPGPjs is even more powerful, secure, and efficient. As part of this update, the OpenPGPjs developer community commissioned an independent security audit from the well-respected security firm Cure53(new window). Independent security audits are an important way to ensure there are no vulnerabilities that could be exploited by attackers.

Summer 2018 Security Audit Coverage

The version 3.0 release brought many new features and improvements, such as support for elliptic curve cryptography(new window) (ECC), which uses smaller signing and encryption keys compared with RSA cryptography(new window) (what Proton Mail uses now), making it a faster and more efficient alternative.

The new version also adds compression, which reduces the size of data before encryption to save space (and time) during encryption and transmission. OpenPGPjs now also offers support for AEAD(new window) (Authenticated Encryption with Associated Data). This protocol provides confidentiality, integrity, and authenticity guarantees on encrypted data, so that when you decrypt data, you can be sure this was the exact same data encrypted by your sender, and you can be sure that it was indeed encrypted by that sender. For those who are interested, you can find the full technical details of OpenPGPjs Version 3.0 here(new window).

The Cure53 team focused on a couple of these new features while also taking a closer look at some key aspects of OpenPGPjs’ crypto implementations. In particular, the audit focused on the following:

  • AEAD encrypted packets
  • EAX, GCM, OCB
  • CMAC
  • All cryptographic primitive implementations: AES, AES-EAX, AES-GCM, AES-CBC, ED25519, C25519, ECDSA, HMAC, P256, P384, P521, SECP256K1
  • Prime number handling
  • Date support in signatures
  • Cryptographic API exposure via different providers

OpenPGPjs Audit Results

We are pleased to receive a highly positive result from the audit. No major issues were discovered. In their summary, Cure53 provided the following feedback(new window):

“Tested cryptographic implementations were top notch and excellent quality given the platform. The only limitations come from the platform itself (JavaScript/web), which do not allow for side channel resistance or reliable constant time operations. Overall however this is an exceptional library for JavaScript cryptography.”

As OpenPGPjs forms the foundation of Proton Mail’s encryption, this result provides extra certainty that Proton Mail’s cryptography is properly protecting users as intended. Working with the open source community is an important part of what we do at Proton Mail, and we will continue to build out the OpenPGPjs library. We are grateful to the Proton community for supporting us in these efforts.

Sign up and get a free secure email account from Proton Mail.

We also provide a free VPN service(new window) to protect your privacy.

Proton Mail and Proton VPN are funded by community contributions. If you would like to support our development efforts, you can upgrade to a paid plan or donate. Thank you for your support!

Chroń swoją prywatność z kontem Proton
Utwórz bezpłatne konto

Powiązane artykuły

en
Google is one of the biggest obstacles to privacy. The Big Tech giant may offer quick access to information online, but it also controls vast amounts of your personal or business data. Recently, more people are becoming aware of the actual price you
What to do if someone steals your Social Security number
en
If you’re a United States citizen or permanent resident, you have a Social Security number (SSN). This number is the linchpin of much of your existence, linked to everything from your tax records to your credit cards. Theft is a massive problem, whic
compromised passwords
en
  • Podstawy ochrony prywatności
Compromised passwords are a common issue and probably one of the biggest cybersecurity threats for regular people. How do passwords get compromised, and is there anything you can do to prevent it? * What does compromised password mean? * How do pa
Is WeTransfer safe?
en
  • Podstawy ochrony prywatności
WeTransfer is a popular service used by millions worldwide to send large files. You may have wondered if it’s safe or whether you should use it to share sensitive files. We answer these questions below and present a WeTransfer alternative that may su
what is a dictionary attack
en
  • Podstawy ochrony prywatności
Dictionary attacks are a common method hackers use to try to crack passwords and break into online accounts.  While these attacks may be effective against people with poor account security, it’s extremely easy to protect yourself against them by usi
en
Data breaches are increasingly common. Whenever you sign up for an online service, you provide it with personal information that’s valuable to hackers, such as email addresses, passwords, phone numbers, and more. Unfortunately, many online services f