Apple Event: May 7th at 7 am PT
What is the procedure to revoke an iMessage Contact Key Verification public key, if it is believed that the private key has been compromised?
Is it as simple as just toggling Contact Key Verification off and then on again?
iPhone 15 Pro
You don't have to do anything, apparently. It uses Vaudenay SAS, and it's self repairing! Very cool. 😎
From his paper on SAS:
Our protocol is well suited to ad-hoc message authentication. It can be used for PKI- less public key transmission or to run a key agreement protocol. It can also be used to restore a secure association in disaster cases when two remote peers have compromised their secret keys or a PKI is badly broken.
btw, the link to that paper is in the Apple Security Research Blog: https://security.apple.com/blog/imessage-contact-key-verification
iMessage Contact Verification Public Key revocation.
