Move Fast and Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings (Citizen Lab)

This report examines the encryption that protects meetings in the popular Zoom teleconference app. We find that Zoom has “rolled their own” encryption scheme, which has significant weaknesses. In addition, we identify potential areas of concern in Zoom’s infrastructure, including observing the transmission of meeting encryption keys through China.