iOS 12 Group FaceTime Encryption Standards

Group FaceTime in iOS 12 relies on end-to-end encryption to secure multi-party voice and video communications. By utilizing Secure Real-time Transport Protocol (SRTP) paired with Advanced Encryption Standard (AES) encryption, Apple ensures that only call participants can decrypt and view media streams, preventing unauthorized third parties and Apple itself from intercepting the data.

End-to-End Encryption Architecture

Unlike traditional group calling platforms that decrypt media streams on a central server to manage bandwidth, Group FaceTime is fully end-to-end encrypted. Every participant's device encrypts its audio and video streams before transmission. Apple uses a server-based architecture to route the data efficiently to all participants, but the central servers function purely as relays and do not possess the cryptographic keys needed to decode the audio or video.

Media Stream Encryption: SRTP and AES

The actual media packets—carrying live video and audio—are secured using the Secure Real-time Transport Protocol (SRTP). Within SRTP, the payload is protected using:

  • AES-GCM (Galois/Counter Mode): Group FaceTime uses 128-bit AES encryption in GCM mode. This provides both confidentiality (protecting the data from being viewed) and integrity verification (ensuring that packets have not been altered or forged in transit).
  • Per-Participant Keys: Each device creates a unique, ephemeral 128-bit media key for its outgoing SRTP stream. This ensures that every audio and video packet sent into the group is encrypted independently by the sender's hardware.

Key Exchange and Apple Identity Service (IDS)

Before any media begins streaming, devices must securely exchange their SRTP media keys. This key negotiation is handled via Apple's Identity Service (IDS):

  • Elliptic Curve Cryptography: Devices use Elliptic Curve Diffie-Hellman (ECDH) on the NIST P-256 curve to establish secure communication channels between individual participants.
  • Certificate Validation: Each participant's device uses its registered Apple ID identity certificates to sign and verify key exchanges, protecting against man-in-the-middle attacks.
  • Ephemeral Session Keys: The keys generated for a specific Group FaceTime session exist only in device memory for the duration of the call and are immediately discarded once the session ends.

Signaling and Connection Establishment

The signaling process that initiates the Group FaceTime call, handles invitations, and tracks who joins or leaves the session is conducted over TLS (Transport Layer Security) connections. This provides an additional layer of transport security over standard IP networks before the peer-to-peer encrypted SRTP stream is established.