88: No Way Out - Engineering Message History Only You Can Read

How do you add end-to-end encryption to a messenger that people have already been using for years, without taking away the message history they expect to be there? Emma Connor works on the team behind Labyrinth, Messenger's encrypted storage protocol. We get into where the encryption keys actually live, which turns out to be nowhere near Meta, and why a six-digit PIN is far harder to attack than six digits ought to be. Emma also explains the hardware security modules that Meta deliberately locked itself out of, what happens when you lose a device and want it cut out of your account, how key transparency lets you verify who you are talking to without having to trust us, and why Labyrinth 1.1 moved to post-quantum cryptography. All of this and more is discussed in this episode.

Got feedback? Send it to us on Threads (https://threads.net/@metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host Pascal (https://mastodon.social/@passy, https://threads.net/@passy_). Fancy working with us? Check out https://www.metacareers.com/.

Links

Opaque Rust Crate - https://crates.io/crates/opaque-ke

Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable - https://engineering.fb.com/2026/05/11/security/labyrinth-1-1-end-to-end-encrypted-e2ee-backups-more-reliable/

The Labyrinth Encrypted Message Storage Protocol - https://engineering.fb.com/wp-content/uploads/2026/05/Minos-Updates-2026-Encrypted-Backups-White-Paper.pdf

MTP E54: Building Key Transparency at WhatsApp - https://pca.st/orlsiq1l

MTP E65: Getting Ready for Post-Quantum Cryptography - https://pca.st/4klppivy

NTS: Authenticated Time at Meta - https://engineering.fb.com/2026/10/06/production-engineering/nts-authenticated-time-at-meta/

Timestamps

Intro 0:06

Introduction Emma 2:25