Open Whisper Systems

Open Whisper Systems
Name	Open Whisper Systems
Formation	2013
Founder	Moxie Marlinspike
Type	Nonprofit, Open-source
Headquarters	United States
Products	Signal Protocol, Signal (app), TextSecure, RedPhone

Open Whisper Systems was a collaborative open-source project focused on developing encrypted communication tools and protocols. Its work influenced messaging applications, cryptography research, and privacy advocacy across the technology sector, affecting actors in the software industry, civil liberties organizations, and national security discourse. The project engaged with diverse stakeholders including technology companies, academic institutions, standards bodies, and nonprofit organizations.

History

Open Whisper Systems originated from earlier projects led by Moxie Marlinspike and associates after developments around TextSecure and RedPhone, with roots in efforts contemporaneous with the activities of Nick Sullivan, Edward Snowden, Glenn Greenwald, Laura Poitras, and investigative reporting on surveillance. The timeline intersected with major events such as the PRISM disclosures, debates in the United States Senate, litigation in the Foreign Intelligence Surveillance Court, and regulatory discussions in the European Union. Early collaborations included contributions from volunteers and researchers associated with Mozilla Foundation, EFF, Wikimedia Foundation, and academic groups at Massachusetts Institute of Technology, Stanford University, University of California, Berkeley, and New York University.

Key milestones came during interactions with major technology firms like Google, Facebook, Twitter, WhatsApp, Microsoft, and Apple Inc. as these companies evaluated end-to-end encryption for consumer products. Standards and interoperability efforts engaged with organizations such as the IETF, W3C, Internet Society, and cryptographic conferences including Crypto, Eurocrypt, and USENIX Security Symposium where protocols and threat models were debated. Public policy implications drew comment from entities like ACLU, Human Rights Watch, Amnesty International, and governmental actors in the United Kingdom, Germany, France, and United States.

Projects and Software

Open Whisper Systems produced software tools that influenced messaging and voice communications. Primary releases included TextSecure and RedPhone, which merged into the Signal mobile application used on platforms by Google (Android), Apple Inc. (iOS), and third-party distributions aligned with projects such as LineageOS and communities around CyanogenMod. The core cryptographic library, commonly known as the Signal Protocol, was incorporated by products including WhatsApp, Facebook Messenger, Skype, Viber, Google Allo, LinkedIn, Dropbox, Signal Desktop (with bindings for Electron (software)), and clients maintained by contributors in the GitHub ecosystem.

Other projects emphasized interoperability and developer adoption, with reference implementations in languages adopted by initiatives at OpenSSL, BoringSSL, libsodium, and research prototypes from labs at MIT Media Lab and Carnegie Mellon University. Documentation and specification work were presented in venues like IETF Working Group drafts and academic papers cited at conferences including NDSS and ACM CCS.

Technical Architecture and Cryptography

The architecture centered on the Signal Protocol, which combined Double Ratchet Algorithm, prekeys, and an extended Triple Diffie–Hellman handshake drawing on research from cryptographers at Open Whisper Systems and academics at Cryptographers' Research Group institutions. The protocol integrated concepts from Diffie–Hellman key exchange, Elliptic-curve cryptography standards used by bodies such as NIST and algorithms referenced in work by researchers affiliated with University College London, ETH Zurich, and Royal Holloway. Implementations emphasized forward secrecy, future secrecy, and deniability properties discussed in literature presented at IEEE Symposium on Security and Privacy and Financial Cryptography and Data Security.

Signal's designs interfaced with transport layers and platform services provided by Google Play Services, Apple Push Notification service, and networking stacks influenced by QUIC and TLS (Transport Layer Security). Cryptographic primitives drew on curves and hashes evaluated by projects linked to Sodium (crypto library), libsodium, and standards committees at IETF Crypto Forum Research Group.

Governance and Funding

Open Whisper Systems operated via a decentralized model combining individual contributors, researchers, and financial support from philanthropic and private sources. Funding streams involved grants and donations similar to funding patterns of Mozilla Foundation, Wikimedia Foundation, EFF, and technology philanthropies associated with entities like Ford Foundation and Open Technology Fund. Governance practices referenced community-driven development norms like those used in Linux Kernel development and open-source project governance models from Apache Software Foundation and Free Software Foundation.

Leadership and stewardship included interactions with corporate adopters and academic partners, with legal and organizational arrangements influenced by regulatory frameworks in the United States and cross-border considerations tied to jurisdictions like Switzerland and Netherlands used by other privacy-focused organizations.

Adoption and Impact

Adoption of the Signal Protocol and related software reached large user bases via integrations by WhatsApp, Facebook, Twitter, Microsoft, and other major platforms, affecting billions of user endpoints and influencing messaging ecosystems across markets including India, Brazil, United Kingdom, Germany, and United States. The project affected discourse in privacy advocacy groups such as ACLU and Electronic Frontier Foundation, and featured in reporting by outlets including The New York Times, The Guardian, Wired (magazine), The Washington Post, and ProPublica. Academic studies from Stanford University, Harvard University, and Oxford University assessed usability and security properties, while human rights organizations used Signal-based tools in contexts like protests and journalism training facilitated by groups such as Reporters Without Borders and Committee to Protect Journalists.

Criticism and Controversies

Critiques addressed trade-offs among usability, metadata leakage, and platform dependencies involving companies like Google and Apple Inc. Critics from law-enforcement perspectives including officials in United Kingdom Home Office and US Department of Justice argued about access and lawful interception, prompting policy debates in forums like the Council of Europe and legislative bodies in Australia and New Zealand. Security researchers at institutions such as University of Cambridge and University of Toronto occasionally published analyses highlighting implementation pitfalls, while debates about centralized updates, trust models, and dependency on proprietary app stores involved stakeholders like Google Play and Apple App Store.

Category:Cryptography Category:Free software projects