Peerio
| Developer(s) | Florencia Herra-Vega, Anri Asaturov, Samvel Avanesov, Dmitry Chestnykh, Viacheslav Zipunov |
|---|---|
| Initial release | January 14, 2015 |
| Operating system | Windows, macOS, Linux, Android, iOS |
| Type | Security |
| License | Proprietary |
| Website | peerio |
Peerio was a cross-platform end-to-end encrypted application that provided secure messaging, file sharing, and cloud file storage. Peerio was available as an application for iOS, Android, macOS, Windows, and Linux. Peerio (Legacy) was originally released on 14 January 2015,[1][2] and was replaced by Peerio 2 on 15 June 2017.[3] The app is discontinued.[4]
Messages and user files stored on the Peerio cloud were protected by end-to-end encryption, meaning the data was encrypted in a way that could not be read by third parties, such as Peerio itself or its service providers. Security was provided by a single permanent key-password, which in Peerio was called an "Account Key".[5]
The company, Peerio Technologies Inc., was founded in 2014 by Vincent Drouin. The intent behind Peerio was to provide a security program that is easier to use than the PGP standard.[6]
Peerio was acquired by WorkJam, a digital workplace solutions provider, on January 13, 2019.[7] [8]
Features
[edit]Peerio allowed users to share encrypted messages and files in direct messages or groups that Peerio called "rooms".[9]
Peerio "rooms" were offered as a team-oriented group chat, allowing administrative functionality to add and remove other users from the group chat.[10]
Peerio allows users to store encrypted files online, offering limited cloud storage for free with optional paid upgrades.[9]
Peerio messages and files persist between logins and hardware, differing from ephemeral encrypted messaging apps which do not retain message or file history between logins or different devices.
Peerio supported application based multi-factor authentication.[9]
Peerio allowed users to share animated GIFs.[11]
Security
[edit]End-to-End Encryption
[edit]Peerio utilized end-to-end encryption and it was applied by default to all message and file data. End-to-end encryption is intended to encrypt data in a way that only the sender and intended recipients are able to decrypt, and thus read, the data.
Taken from Peerio's privacy policy:
"Peerio utilizes the NaCl (pronounced "salt") cryptographic framework, which itself uses the following cryptographic primitives:
- X25519 for public key agreement over elliptic curves.
- ed25519 for public key signatures.
- XSalsa20 for encryption and confidentiality.
- Poly1305 for ensuring the integrity of encrypted data.
Additionally, Peerio uses scrypt for memory-hard key derivation and BLAKE2s is used for various hashing operations.
For in-transit encryption, Peerio Services used Transport Layer Security (TLS) with best-practice cipher suite configuration, including support for perfect forward secrecy (PFS). You can view a detailed and up-to-date independent review of Peerio's TLS configuration on SSL Labs."[12][13]
Code Audits
[edit]Prior to Peerio's initial release, the software was audited by the German security firm Cure53, which found only non-security related bugs, all of which were fixed prior to the applications release.[2]
According to Peerio's website, the application was also audited in March 2017 by Cure53.[10]
Open Source
[edit]Peerio was partly open source and published code publicly on GitHub[14]
Bug Bounty
[edit]Peerio offered a bug bounty, offering cash rewards for anyone who reports security vulnerabilities.[15]
Peerio (Legacy)
[edit]The first iteration of Peerio, Peerio (Legacy), was developed by Nadim Kobeissi and Florencia Herra-Vega and was released on 14 January 2015[1][2] and was closed on 8 January 2018.[11]
Peerio (Legacy) was a free application, available for Android, iOS, Windows, macOS, Linux, and as a Google Chrome extension.[16][17] It offered end-to-end encryption, which is enabled by default. The encryption used the miniLock open-source security standard, which was also developed by Kobeissi.[18]
On 15 June 2017, Peerio 2 was launched as the successor to Peerio (Legacy). According to the company's blog, Peerio 2 is purported to be a "radical overhaul" of the original application's core technology.[3] Claimed benefits in comparison to Peerio (Legacy) include increased speed, support for larger file transfers (up to 7000GB), and a re-designed user interface. Peerio also stated an added focus towards businesses looking for encrypted team collaboration software.[10]
References
[edit]- ^ a b Paul, Ian (15 January 2015). "Peerio hands-on: This secure messaging suite packs dead simple end-to-end encryption". PC World. Retrieved 19 May 2015.
- ^ a b c Greenberg, Andy (14 January 2015). "The Free Encryption App That Wants to Replace Gmail, Dropbox, and HipChat". Wired. Retrieved 19 May 2015.
- ^ a b Arora, Saumya (2017-06-15). "The NEW Peerio: A Brand New Architecture. A Brand New Experience". Medium. Retrieved 2018-01-30.
- ^ "Peerio Alternatives and Similar Apps".
- ^ Lomov, Vladimir (19 September 2017). "PEERIO-2 - THE NEW VERSION OF THE SECURE MESSENGER". te-st.ru. te-st. Retrieved 13 September 2017.
- ^ Meyer, David (14 January 2015). "Peerio is a chat and storage service with big security claims". Gigaom. Retrieved 19 May 2015.
- ^ "WorkJam acquires secure chat platform Peerio". BetaKit. 14 January 2019. Retrieved 2019-11-19.
- ^ Releases, Business Wire News (2019-01-13). "WorkJam Announces Acquisition of Peerio Technologies | Financial Post". Retrieved 2019-11-19.
{{cite news}}:|first1=has generic name (help) - ^ a b c "Peerio". www.peerio.com. Retrieved 2018-01-31.
- ^ a b c "Peerio". www.peerio.com. Retrieved 2018-01-31.
- ^ a b "Peerio". www.peerio.com. Retrieved 2018-01-31.
- ^ "SSL Server Test: icebear.peerio.com (Powered by Qualys SSL Labs)". www.ssllabs.com. Retrieved 2018-01-30.
- ^ "Peerio". www.peerio.com. Retrieved 2018-01-30.
- ^ "Peerio Technologies". GitHub. Retrieved 2018-01-31.
- ^ "Peerio". www.peerio.com. Retrieved 2018-01-31.
- ^ Morrison, Kimberlee (22 January 2015). "Peerio: Simple Encryption for the Masses". SocialTimes. Retrieved 19 May 2015.
- ^ Peerio (15 March 2016). "Android and iOS apps are here!". Peerio. Archived from the original on 21 March 2016. Retrieved 16 March 2016.
- ^ Whittaker, Zack (2 March 2015). "Meet the free encryption app that promises to put your privacy first". ZDNnet.com. Retrieved 19 May 2015.