> Developers who deploy the BBM SDK will be asked to generate their own encryption keys, meaning BlackBerry will not have the ability to turn over to law enforc

> Developers who deploy the BBM SDK will be asked to generate their own encryption keys, meaning BlackBerry will not have the ability to turn over to law enforcement any messages sent through this system, even if compelled by a court order. Doesn't the entire security of BBM rely only on a very short code, one which Blackberry can easily swap with a different key which they posses in practice? Very similar to Apple iMessage. Also last time I checked their enterprise offering was essentially static Triple DES key only - is their public offering any better? EDIT: https://www.schneier.com/blog/archives/2016/04/blackberrys_glo.html https://www.schneier.com/blog/archives/2016/04/blackberrys_g... Looks like as of last year they used a single static key for all the BBM encryption. And it's in the hands of Canadian authorities already. Do we have any reason to believe they have or will change this? Seems completely silly to me to use something this broken.