The French Prime Minister instructed government officials to uninstall popular messaging apps like WhatsApp, Telegram, and Signal from their mobile devices due to security vulnerabilities. This directive came through a circular dated November 22nd. Instead, officials are mandated to switch to Olvid, a French-developed OS messaging application. The decision to promote Olvid is a significant boost for the app, created by cybersecurity experts Thomas Baignères and Matthieu Finiasz.
Olvid operates similarly to other messaging apps in terms of its basic functionalities, allowing users to create groups, exchange messages, and share media. However, what sets Olvid apart is its strong emphasis on security and privacy. The app uses end-to-end encryption algorithms to protect user data. Notably, Olvid doesn't store user information on servers. Its encryption protocols are based on asymmetric encryption, and use the AES 256 algorithm in CTR mode. Validated by the French cybersecurity agency the ANSSI for its high security levels, it doesn’t require sharing phone numbers or email addresses; instead, it involves scanning a QR code when both users are physically nearby. These technical means answer many of the differences pointed to in past analysis from the ANSSI when analysing cryptographic protocols.
The Olvid application's client-side source code for both iOS and Android is open-source and available for public access. However, as of now, the server-side code that facilitates message transmission is not open-source. The decision not to publish the server-side code is primarily due to several reasons. While Olvid aims to eventually open source the server code, it would likely be in a more deployable standalone format, suitable for smaller user bases. Additionally, Olvid is exploring options for multicloud infrastructure to enhance security and align with recognised security standards such as SecNumCloud.
This push for a sovereign and secure app has also been described by the French minister for digital Jean Noel Barrot, who reaffirmed the willingness of the government to promote the French tech.