New paper accepted @ 35th USENIX Security Symposium
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer.
In this paper, the authors demonstrate that today’s major E2EE messengers do not guarantee any form of TC for group chats, allowing a malicious group member to selectively omit, reorder, or present altered content to different recipients without triggering warnings in their user interface.
Title of the paper
Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats
Abstract
End-to-end encrypted (E2EE) messaging apps are widely praised for their security and thus also used for sensitive coordination in group chats (e.g., by political decision makers). After Threema and WhatsApp, also Signal and iMessage have recently introduced polls to aid agreement processes in groups. This implicitly sets the expectation that all participants see the same outcome and thus have the same view of the conversation. This property is commonly referred to as transcript consistency (TC).
In this work, we demonstrate that today’s major E2EE messengers do not guarantee any form of TC for group chats, allowing a malicious group member to selectively omit, reorder, or present altered content to different recipients without triggering warnings in their user interface. We systematically investigate the extent of the problem under a malicious-participant threat model that targets the integrity of the shared transcript, or inconsistent delivery across a user’s linked devices. We identify multiple equivocation vectors that range from protocol fallback paths to deliberate use of pairwise delivery channels within groups. We demonstrate concrete exploitation scenarios such as social engineering, evading moderation, and, in particular, rigging polls. Beyond these cross-service design issues, we also uncover implementation-specific behaviors with privacy implications (e.g., device OS fingerprinting).
Finally, we contextualize our findings within prior transcript-consistency research and outline practical low-overhead mitigations and UI signaling strategies that can be integrated into state-of-the-art E2EE group protocols.
Authors: Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, Aljosha Judmayer
The paper was featured by heise online in the article “Verschlüsselt, aber falsch: Gruppenchats anfällig für manipulierte Inhalte.” The coverage highlights our findings that major end-to-end encrypted messengers, (including WhatsApp, Signal, Threema, and iMessage) do not guarantee transcript consistency in group chats, allowing malicious participants to present different conversation histories to different recipients without triggering user-visible warnings. The article emphasizes the implications for sensitive group coordination, such as discussions among political decision-makers, where manipulated polls or inconsistent chat transcripts could influence collective decisions while remaining undetected.
Links
Full Paper
Github with Code and Videos
Heise Article
USENIX Security Symposium