Signal alumni release open-source framework for encrypted collaboration

Former Signal developers and cryptographers from Harvard University and Microsoft Research have released a preview of Encrypted Spaces, an open-source code library designed to facilitate end-to-end encryption for complex, multi-user collaboration applications. The system utilises zero-knowledge proofs to allow servers to manage data integrity and user access without decrypting content, aiming to provide a secure foundation for apps resembling Slack or Google Docs.

The project originated from efforts in 2019 and 2020 to upgrade Signal's group-chat privacy, specifically regarding the management of member lists using anonymous credentials. While end-to-end encryption is standard for simple messaging, it has historically struggled to fit complex collaborative software models. Encrypted Spaces addresses this by using a change log to track encrypted data modifications, allowing users to implement changes locally while the server uses zero-knowledge proofs to verify integrity without accessing unencrypted data.

Microsoft Research anthropologist Mary Gray is leading efforts to collaborate with Bay Area community and social services groups to develop prototypes tailored to their needs. The initiative represents a shift from viewing encryption as a simple pipe between two users to creating "spaces" where users can collectively make changes to information on a server while maintaining strong privacy protections.

The architecture allows the server to "roll up" changes into a succinct proof, enabling users to verify the current state of data without downloading the entire history of changes. This approach aims to make end-to-end encryption accessible to developers without requiring deep cryptographic knowledge, potentially setting a new standard for privacy-preserving application development.

Other collaboration tools, such as Proton, CryptPad, Nextcloud, and Matrix, already offer some form of end-to-end encryption, but Encrypted Spaces aims to provide a more rigorous, standardised, and open-source foundation. The team demonstrated a prototype application called 'Spaces', which includes group notes, calendar, and file-storage functions, but currently lacks features such as voice calling and search.

The initiative was driven by the desire to extend the Signal protocol's privacy features to broader application development. By providing a credible, open-source foundation, the project seeks to ensure that sensitive conversations and collaborations are not left vulnerable to surveillance, reinforcing the expectation of privacy in the digital world.

The release marks a significant step in the evolution of secure communication tools, addressing the limitations of traditional encryption models in multi-user environments. As the technology matures, it could influence how privacy is integrated into everyday software, moving towards a future where end-to-end encryption is the default for all applications.