Cambridge researchers have launched secure messaging technology that shields whistleblowers from detection even under pervasive government surveillance.
The Guardian has integrated this system into its mobile news app, creating what experts call the first generative AI-powered tool designed specifically to protect sources from discovery.
The technology, called CoverDrop, automatically generates decoy messages to create “air cover” for genuine communications between whistleblowers and journalists. This approach addresses a critical vulnerability that has emerged since the Edward Snowden revelations exposed global surveillance capabilities.
Beyond Traditional Security Measures
Unlike existing tools like SecureDrop or encrypted messaging apps, CoverDrop hides within news organizations’ existing mobile applications. Every user becomes potential cover for whistleblowers, making it impossible for adversaries to identify who is actually sending sensitive information.
“This provides whistleblowers with plausible deniability,” said Professor Alastair Beresford from Cambridge’s Department of Computer Science and Technology. “That’s important in a world of pervasive surveillance where it has become increasingly hazardous to be a whistleblower.”
The system creates digital “dead drops” – virtual locations where messages are left for journalists to retrieve later. These are just two features in a suite of protections designed to shield sources even if their smartphones are seized or stolen.
Addressing Post-Snowden Realities
The development began after Edward Snowden’s 2013 revelations showed how intelligence agencies monitor global communications. Traditional whistleblowing tools often require downloading specialized software like Tor browsers, which can flag users for surveillance.
“If only you are using Tor in your office and the leak comes from your office, you may expect trouble,” the researchers noted in their study.
CoverDrop solves this by embedding secure communication within apps people already use daily. The system maintains constant traffic flow, sending encrypted messages at regular intervals whether real communications are happening or not.
Technical Innovation
The technology employs several sophisticated security measures:
- All messages are padded to identical lengths, making real communications indistinguishable from decoys
- Two-layer encryption protects both message content and communication patterns
- Trusted Execution Environment (TEE) technology prevents access even with physical server seizure
- No permanent storage – messages are processed in memory and immediately deleted
Real-World Testing Shows Promise
Performance testing revealed the system can process 833 messages per second with single-threaded operation, scaling to 3 million messages per hour with multiple cores. The mobile app overhead remains minimal – adding less than 500KB to application size and requiring only 4.3MB of monthly data usage.
Can this technology truly protect whistleblowers in an age of unprecedented surveillance? Early results suggest it addresses key vulnerabilities that have compromised sources in recent high-profile cases.
“The free press fulfils an important function in a democracy,” said Beresford. “It can provide individuals with a mechanism through which they can hold powerful people and organisations to account.”
Open Source Approach
The researchers made CoverDrop’s code publicly available to encourage adoption across news organizations worldwide. This transparency allows security experts to audit the system while enabling other outlets to implement similar protections.
“All the CoverDrop code will be available online and open source,” said Cambridge’s Dr Daniel Hugenroth, who co-led the development. “This transparency is essential for security-critical software and allows others to audit and improve it.”
The Guardian’s implementation represents the first real-world deployment of this technology, but researchers hope other news organizations will follow suit.
Beyond Initial Contact
While CoverDrop focuses on secure initial communication between sources and journalists, it’s designed to complement existing tools rather than replace them entirely. For document sharing and longer conversations, sources would typically transition to established platforms like SecureDrop after making contact.
The system addresses what researchers identified as the weakest link in the whistleblowing chain – that critical first moment when potential sources reach out to reporters. Workshop sessions with British news organizations revealed this initial contact often happens through insecure channels like regular email or phone calls.
“When sources send messages, their confidentiality and integrity can be assured through the secure messaging protocols on their smartphone,” said Hugenroth. “CoverDrop goes one step further and also protects the communication patterns between sources and journalists by using decoy messages to provide cover.”
The technology offers hope for protecting democracy’s crucial watchdogs in an era when surveillance capabilities continue expanding faster than legal protections for whistleblowers.
Related
If our reporting has informed or inspired you, please consider making a donation. Every contribution, no matter the size, empowers us to continue delivering accurate, engaging, and trustworthy science and medical news. Independent journalism requires time, effort, and resources—your support ensures we can keep uncovering the stories that matter most to you.
Join us in making knowledge accessible and impactful. Thank you for standing with us!
