SAN FRANCISCO – Wickr, an SMS encryption program, launched Monday in beta on Android. The app’s argument is simple: its San Francisco-based makers claim that Wickr, now cross-platform between Android and iOS, provides the most secure text messaging apparatus currently available.
It uses AES-256, RSA-4096, ECDH-521, Transport Layer Security, and SHA-256 to encode data while it’s being stored on a server and while being transferred between devices. It?s so effective, Wickr-co-founder Nico Sell said the FBI asked for a back door. Wickr said no.
Sell, who helps run the DefCon Kids program at the annual DefCon security and hacking conference, connects her heritage as a Daughter of the American Revolution to her work on Wickr.
“My ancestor was a drummer boy for George Washington, who founded the postal service. The US Post Office allowed people to have freedom of information, private correspondence without the government’s prying eyes. That,” she said, “is what made America great.”
Wickr boasts that it meets or exceeds HIPAA requirements for medical record privacy and encryption, including military grade FIPS 140-2 and exceeds NSA Suite B compliant. It also uses Perfect Forward Secrecy, an encryption technique generates and uses encryption keys once and then deletes them immediately afterwards. PFS is used by Google but few other Internet companies, although Facebook recently has begun to incorporate it.
In fact, because Wickr’s user data and texts are so heavily protected, user identification outside of user-to-user communication is anonymous. Messages are tied to the device they are sent from, attachments have metadata such as time, location, and identity stamps stripped from them, and deleted texts are shredded. Even the sender’s identity is encrypted before the message leaves the sender’s phone.
Wickr expects only 3 percent of its customers to pay for what it calls “professional” calling and texting, which it hopes will subsidize the other 97 percent of its users. The company didn’t specify what features would differentiate “professional” from “free,” but Wickr has said that it doesn’t plan on showing ads to its non-paying customers.
To learn more about the cyber war raging today, read CyberStyletto
