GSMA Announces End-to-End Encryption for RCS Messaging Across Android and iOS
The GSM Association (GSMA) has officially introduced support for end-to-end encryption (E2EE) in messages sent via the Rich Communications Services (RCS) protocol, enhancing security for cross-platform communication between Android and iOS users.
As part of this initiative, the latest GSMA specifications for RCS incorporate E2EE using the Messaging Layer Security (MLS) protocol under the RCS Universal Profile 3.0. "The new specifications define how to apply MLS within the context of RCS," said Tom Van Pelt, GSMA’s technical director. "These procedures ensure that messages and other content, such as files, remain confidential and secure as they travel between clients."
This advancement makes RCS the first large-scale messaging service to support interoperable E2EE across different client implementations and providers.
Currently, Google’s RCS implementation in the Messages app for Android uses the Signal protocol for encryption. However, these safeguards are only available for conversations within the app and do not extend to messages exchanged with iOS users or other RCS clients on Android.
The announcement follows GSMA’s earlier commitment to implementing E2EE for secure messaging between Android and iOS platforms, a move that aligns with Apple's plan to introduce RCS support in iOS 18.
Google has also expressed its commitment to strengthening RCS security, having announced in July 2023 its plan to integrate MLS into its Messages service and open-source implementation. "RCS continues to support a range of interoperable messaging functions between iOS and Android users, such as group messaging, the ability to share high-resolution media, and see read receipts and typing indicators," Van Pelt added.
Commenting on the update, Google stated, "We've always been committed to providing a secure messaging experience, and Google Messages users have had end-to-end encrypted (E2EE) RCS messaging for years. We're excited to have this updated specification from GSMA and will work as quickly as possible with the mobile ecosystem to implement and extend this important user protection to cross-platform RCS messaging.
