Silent Circle (software)

Last updated
Silent Circle
Company type Private
IndustrySoftware
FoundedOctober 2011 (2011-10)
Headquarters
Washington DC, United States
Key people
Gregg Smith - CEO
Website www.silentcircle.com

Silent Circle is an encrypted communications firm based in Washington DC. [1] Silent Circle provides multi-platform secure communication services for mobile devices and desktops. Launched October 16, 2012, the company operates under a subscription business model. [2] The encryption part of the software used is free software/open source and peer-reviewed. [2] For the remaining parts of Silent Phone and Silent Text, the source code is available on GitHub, but under proprietary software licenses. [3]

Contents

History

In November 2011, Mike Janke called Phil Zimmermann with an idea for a new kind of private, secure version of Skype. Zimmermann agreed to the project and called Jon Callas, co-founder of PGP Corporation and Vincent Moscaritolo. Janke brought in security expert Vic Hyder, and the founding team was established. [4] [5] The company was founded in the Caribbean island of Nevis, but moved its headquarters to Le Grand-Saconnex [6] near Geneva, Switzerland in 2014 in search of a country with "stronger privacy laws to protect its customers' information." [7]

On August 9, 2013, through their website, Silent Circle announced that the Silent Mail service would be shut down, because the company could "see the writing on the wall" and felt it was not possible to sufficiently secure email data with the looming threat of government compulsion and precedent set by the Lavabit shutdown the day before. [8]

In January 2015, Silent Text had a serious vulnerability that allowed an attacker to remotely take control of a Blackphone device. [9] A potential attacker only needed to know the target’s Silent Circle ID number or phone number. [9] Blackphone and Silent Circle patched the vulnerability shortly after it had been disclosed. [10]

In March 2015 there was a controversy when Information Security specialist and hacker Khalil Sehnaoui identified that Silent Circle's warrant canary had been removed from their site. [11]

In January 2017 Gregg Smith was named CEO with a renewed focus on serving the large business space as well as Government entities. At the same time Tony Cole, VP and Global Government CTO of FireEye, was named to the Board of Directors. [12] Shortly after Smith became CEO, the company moved back from Switzerland to the United States. [13]

Reception

In November 2014, Silent Phone and Silent Text received top scores on the Electronic Frontier Foundation's secure messaging scorecard, along with "ChatSecure + Orbot", Cryptocat, TextSecure, and "Signal / RedPhone". They received points for having communications encrypted in transit, having communications encrypted with keys the providers don't have access to (end-to-end encryption), making it possible for users to independently verify their correspondent's identities, having past communications secure if the keys are stolen (forward secrecy), having their code open to independent review (open source), having their security designs well-documented, and having recent independent security audits. [14]

However, as of August 2020, the page for the secure messaging scorecard states that it is out of date and should not be used in privacy- and security-related decision-making.

Products

The company's products [15] enable encrypted mobile phone calls, text messaging, and video chat.

Current

Its current products include the following:

Discontinued

Its discontinued products include the following:

Silent Circle Instant Message Protocol

Silent Circle Instant Message Protocol (SCIMP) was an encryption scheme that was developed by Vincent Moscaritolo. It enabled private conversation over instant message transports such as XMPP (Jabber). [19] [ citation needed ]

SCIMP provided encryption, perfect forward secrecy and message authentication. [20] It also handled negotiating the shared secret keys.

History

The protocol was used in Silent Text. Silent Text was discontinued on September 28, 2015, when its features were merged into Silent Circle's encrypted voice calling application called Silent Phone. [16] At the same time, Silent Circle transitioned to using a protocol that uses the Double Ratchet Algorithm instead of SCIMP. [16] [21]

Business model

The company is privately funded [5] and operates under a subscription business model. [2]

See also

Related Research Articles

<span class="mw-page-title-main">AIM (software)</span> Instant messaging service

AIM was an instant messaging and presence computer program created by AOL, which used the proprietary OSCAR instant messaging protocol and the TOC protocol to allow registered users to communicate in real time.

<span class="mw-page-title-main">Phil Zimmermann</span> Creator of Pretty Good Privacy (PGP)

Philip R. Zimmermann is an American computer scientist and cryptographer. He is the creator of Pretty Good Privacy (PGP), the most widely used email encryption software in the world. He is also known for his work in VoIP encryption protocols, notably ZRTP and Zfone. Zimmermann is co-founder and Chief Scientist of the global encrypted communications firm Silent Circle.

<span class="mw-page-title-main">Instant messaging</span> Form of computer communication over the internet or locally

Instant messaging (IM) technology is a type of synchronous computer-mediated communication involving the immediate (real-time) transmission of messages between two or more parties over the Internet or another computer network. Originally involving simple text message exchanges, modern IM applications and services tend to also feature the exchange of multimedia, emojis, file transfer, VoIP, and video chat capabilities.

<span class="mw-page-title-main">Pidgin (software)</span> Open-source multi-platform instant messaging client

Pidgin is a free and open-source multi-platform instant messaging client, based on a library named libpurple that has support for many instant messaging protocols, allowing the user to simultaneously log in to various services from a single application, with a single interface for both popular and obsolete protocols, thus avoiding the hassle of having to deal with new software for each device and protocol.

End-to-end encryption (E2EE) is a private communication system in which only communicating users can participate. As such, no one else, including the communication system provider, telecom providers, Internet providers or malicious actors, can access the cryptographic keys needed to converse. End-to-end encryption is intended to prevent data being read or secretly modified, other than by the true sender and recipient(s). The messages are encrypted by the sender but the third party does not have a means to decrypt them, and stores them encrypted. The recipients retrieve the encrypted data and decrypt it themselves. Because no third parties can decipher the data being communicated or stored, for example, companies that provide end-to-end encryption are unable to hand over texts of their customers' messages to the authorities.

eBuddy Instant messaging software

eBuddy is a privately held Dutch software company that offers instant messaging services. As of 2011, eBuddy reported 100 million downloads. The company's flagship service is XMS, a proprietary cross-platform instant messaging service. After some changes of ownership, the company is now again owned by its original founders, Onno Bakker and Jan-Joost Rueb.

<span class="mw-page-title-main">Cryptocat</span> Open source encrypted chat application

Cryptocat is a discontinued open-source desktop application intended to allow encrypted online chatting available for Windows, OS X, and Linux. It uses end-to-end encryption to secure all communications to other Cryptocat users. Users are given the option of independently verifying their buddies' device lists and are notified when a buddy's device list is modified and all updates are verified through the built-in update downloader.

<span class="mw-page-title-main">Guardian Project (software)</span> Open source security software project

The Guardian Project is a global collective of software developers, designers, advocates, activists, and trainers who develop open-source mobile security software and operating system enhancements. They also create customized mobile devices to help individuals communicate more freely and protect themselves from intrusion and monitoring. The effort specifically focuses on users who live or work in high-risk situations and who often face constant surveillance and intrusion attempts into their mobile devices and communication streams.

Wickr is an American software company based in New York City. It is known for its instant messaging application of the same name. The Wickr instant messaging apps allow users to exchange end-to-end encrypted and content-expiring messages, and are designed for iOS, Android, Mac, Windows, and Linux operating systems. Wickr was acquired by Amazon Web Services (AWS) in mid-2021. The free version of the app was discontinued in December 2023.

<span class="mw-page-title-main">ChatSecure</span> Messaging application

ChatSecure is a messaging application for iOS which allows OTR and OMEMO encryption for the XMPP protocol. ChatSecure is free and open source software available under the GPL-3.0-or-later license.

<span class="mw-page-title-main">Blackphone</span> Smartphone sold from 2014-2016

The Blackphone was a smartphone built to ensure privacy, developed by SGP Technologies, a wholly owned subsidiary of Silent Circle. Originally, SGP Technologies was a joint venture between the makers of GeeksPhone and Silent Circle. Marketing is focused upon business users, stressing that employees often conduct business using private devices and services that are not secure and that the Blackphone service readily provides users with options that ensure confidentiality when needed. Blackphone provides Internet access through VPN. The device runs a modified version of Android called SilentOS that comes with a bundle of security-minded tools.

Surespot was a free open-source instant messaging application for Android and iOS with a focus on privacy and security. It was shut down on July 31, 2022.

TextSecure was an encrypted messaging application for Android that was developed from 2010 to 2015. It was a predecessor to Signal and the first application to use the Signal Protocol, which has since been implemented into WhatsApp and other applications. TextSecure used end-to-end encryption to secure the transmission of text messages, group messages, attachments and media messages to other TextSecure users.

<span class="mw-page-title-main">Open Whisper Systems</span> Open source software organization

Open Whisper Systems was a software development group that was founded by Moxie Marlinspike in 2013. The group picked up the open source development of TextSecure and RedPhone, and was later responsible for starting the development of the Signal Protocol and the Signal messaging app. In 2018, Signal Messenger was incorporated as an LLC by Moxie Marlinspike and Brian Acton and then rolled under the independent 501c3 non-profit Signal Technology Foundation. Today, the Signal app is developed by Signal Messenger LLC, which is funded by the Signal Technology Foundation.

<span class="mw-page-title-main">Threema</span> Instant messaging smartphone service

Threema is a paid cross-platform encrypted instant messaging app developed by Threema GmbH in Switzerland and launched in 2012. The service operates on a decentralized architecture and offers end-to-end encryption. Users can make voice and video calls, send photos, files, and voice notes, share locations, and make groups. Unlike many other popular secure messaging apps, Threema does not require phone numbers or email addresses for registration, only a one-time purchase that can be paid via an app store or anonymously with Bitcoin or cash.

PrivatOS was an operating system used in the Blackphone from June 1, 2014, to June 30, 2016. It was targeted at users who sought improved privacy and security. It provided encryption for phone calls, emails, texts, and internet browsing. PrivatOS was a modified version of Android, forked from Android 4.4.2, that came with a bundle of security-minded tools. However, in contrast to Android, PrivatOS was not open source. The company that shipped PrivatOS, SGP Technologies is a joint venture between the makers of GeeksPhone, and Silent Circle.

Wire Swiss GmbH is a software company with headquarters in Zug, Switzerland. Its development center is in Berlin, Germany. The company is best known for its messaging application called Wire.

<span class="mw-page-title-main">Signal (software)</span> Privacy-focused encrypted messaging app

Signal is an open-source, encrypted messaging service for instant messaging, voice calls, and video calls. The instant messaging function includes sending text, voice notes, images, videos, and other files. Communication may be one-to-one between users or may involve group messaging.

<span class="mw-page-title-main">Signal Protocol</span> Non-federated cryptographic protocol

The Signal Protocol is a non-federated cryptographic protocol that provides end-to-end encryption for voice and instant messaging conversations. The protocol was developed by Open Whisper Systems in 2013 and was introduced in the open-source TextSecure app, which later became Signal. Several closed-source applications have implemented the protocol, such as WhatsApp, which is said to encrypt the conversations of "more than a billion people worldwide" or Google who provides end-to-end encryption by default to all RCS-based conversations between users of their Google Messages app for one-to-one conversations. Facebook Messenger also say they offer the protocol for optional Secret Conversations, as does Skype for its Private Conversations.

Wire is an encrypted communication and collaboration app created by Wire Swiss. It is available for iOS, Android, Windows, macOS, Linux, and web browsers such as Firefox. Wire offers a collaboration suite featuring messenger, voice calls, video calls, conference calls, file-sharing, and external collaboration – all protected by a secure end-to-end-encryption. Wire offers three solutions built on its security technology: Wire Pro – which offers Wire's collaboration feature for businesses, Wire Enterprise – includes Wire Pro capabilities with added features for large-scale or regulated organizations, and Wire Red – the on-demand crisis collaboration suite. They also offer Wire Personal, which is a secure messaging app for personal use.

References

  1. O'Neill, Patrick Howell (27 July 2017). "Back in America with a black eye, Silent Circle rebuilds with focus on software" . Retrieved 22 May 2020.
  2. 1 2 3 Ungerleider, Neal (5 October 2012). "Phil Zimmermann's Silent Circle Builds A Secure, Seductive Fortress Around Your Smartphone". Fast Company. Retrieved 2015-05-23.
  3. "SilentCircle". GitHub. Retrieved 2015-05-23.
  4. Bort, Julie. "An Internet Hall Of Famer And Some Navy SEALs Want To Make Your iPhone Safer". Business Insider, Inc. Retrieved 12 March 2013.
  5. 1 2 Takahashi, Dean (8 August 2014). "Crypto wiz Phil Zimmermann leads charge to make phone calls really private". Venturebeat. Retrieved 26 January 2015.
  6. Moneyhouse: Silent Circle SA (excerpt from the commercial register)
  7. Ranger, Steve (23 June 2015). "Defending the last missing pixels: Phil Zimmermann speaks out on encryption, privacy, and avoiding a surveillance state". TechRepublic.
  8. 1 2 Tsukayama, Hayley (Aug 9, 2013). "Lavabit, Silent Circle shut down e-mail: What alternatives are left?". Washington Post. Retrieved 10 August 2013.
  9. 1 2 Dowd, Mark (27 January 2015). "BlackPwn: BlackPhone SilentText Type Confusion Vulnerability". Azimuth Security. Retrieved 1 December 2015.
  10. Mimoso, Michael (28 January 2015). "Memory Corruption Bug Patched in Blackphone Silent Text App". Threatpost. Kaspersky Lab. Retrieved 1 December 2015.
  11. "Silent Circle: We haven't been served a single demand for data". ZDNet. CBS Interactive. 8 March 2015. Retrieved 3 November 2015.
  12. "Silent Circle Appoints Gregg Smith as Chief Executive Officer".
  13. "Back in America with a black eye, Silent Circle rebuilds with focus on software". 27 July 2017.
  14. "Secure Messaging Scorecard. Which apps and tools actually keep your messages safe?". Electronic Frontier Foundation. 2014-11-04.
  15. Ridden, Paul (30 July 2012). "PGP creator aims to keep digital communications strictly confidential with Silent Circle". Gizmag. Retrieved 12 March 2013.
  16. 1 2 3 4 5 "What is Silent Phone?". Support.silentcircle.com. Silent Circle. 17 September 2015. Retrieved 4 October 2015.
  17. "A Eulogy: PrivatOS. June 1, 2014 – June 30, 2016 - Privacy Delivered" (Blog). Silent Circle. 30 June 2016. Archived from the original on 18 August 2016. Retrieved 9 February 2020.
  18. "Attila Security raises $2.5M, moves into Fulton-based DataTribe". 2 November 2018.
  19. "Silent Circle's SCIMP page". Archived from the original on 4 September 2015. Retrieved 13 December 2015.
  20. Moscaritolo, Vinnie; Belvin, Gary; Zimmermann, Phil (5 December 2012). "Silent Circle Instant Messaging Protocol Protocol Specification" (PDF). Silent Circle. Archived from the original (PDF) on 2 April 2015. Retrieved 31 October 2013.
  21. Armasu, Lucian (3 November 2015). "TextSecure, RedPhone Private Communications Apps Now Combined Into 'Signal' App". Tom's Hardware. Purch Group, Inc. Retrieved 8 March 2016.

Further reading