You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode Encryption in transit: why a chat server can read messages that are locked on the way

How end-to-end encryption works: why even WhatsApp cannot read your messages

End-to-end encryption: how a message stays locked all the way to your friend's phone

With end-to-end encryption, every message goes through the company's chat server. But the company cannot read it. Where is the lock put, and who holds the key?

  1. 1 Before the message leaves, your phone scrambles it with a key, a long secret number. Only someone with the same key can turn it back into words.balloon ride!key9#vQ!x2&Lm

    Before the message leaves, your phone scrambles it with a key, a long secret number. Only someone with the same key can turn it back into words.

  2. 2 Then it goes out locked for the trip as well, as in any careful app. The scrambled message now rides inside the lock of the trip.your phonechat server9#vQ!x2&Lmlocked for the trip

    Then it goes out locked for the trip as well, as in any careful app. The scrambled message now rides inside the lock of the trip.

  3. 3 At the server, the lock of the trip comes off, as before. Under it, Rono finds only the scrambled message. The server has no key for it, so it just passes it on.chat server9#vQ!x2&LmRonoJust noise.

    At the server, the lock of the trip comes off, as before. Under it, Rono finds only the scrambled message. The server has no key for it, so it just passes it on.

  4. 4 Miva's phone holds the same key. It turns the noise back into your words, and Miva grins.9#vQ!x2&Lmthe same keyballoon ride!Miva

    Miva's phone holds the same key. It turns the noise back into your words, and Miva grins.

  5. 5 The lock went on at one end of the chat and came off at the other end, and nowhere in between. This is end-to-end encryption. WhatsApp has used it for every chat between people since 2016, and Signal has from the start.locked all the wayyour phonechat serverMiva's phoneno key

    The lock went on at one end of the chat and came off at the other end, and nowhere in between. This is end-to-end encryption. WhatsApp has used it for every chat between people since 2016, and Signal has from the start.

  6. 6 One thing does not add up. Your phone and Miva's hold the same key, and they never met. When you pressed send, Miva's phone was even switched off, in her bag.your phoneMiva's phoneswitched off?

    One thing does not add up. Your phone and Miva's hold the same key, and they never met. When you pressed send, Miva's phone was even switched off, in her bag.

  7. Quick check

    A court asks the chat company for your message to Miva.What can thecompany hand over?

    A court asks the chat company for your message to Miva.

    Show the answer

    At most the scrambled message, and only while the server still holds it. The key that opens it lives only on your phone and Miva's.

Next episode Public and private keys: the key your phone can show to everyone

Share this comic

More comics