Why Does Your iPhone Suddenly Say 'Encrypted'? the Real Reason Behind Apple's New Message Label
Every time you set up an iPhone, the device generates private cryptographic keys stored inside the Secure Enclave, an isolated hardware subsystem isolated from the primary operating system. These private keys never leave your physical hardware. At the same time, the device uploads corresponding public keys to Apple’s directory servers, known as the Identity Service (IDS).
When you type a message and press send, your iPhone queries the IDS to fetch the recipient’s public key. Your phone encrypts the message payload locally using a combination of AES-128 and RSA or elliptic curve cryptography. By the time the packets exit your device's Wi-Fi or cellular antenna, they are unreadable gibberish. Neither telecom carriers nor Apple’s own routing servers possess the mathematical capability to read the plaintext.
Decryption on iPhone happens exclusively when the recipient device downloads the payload and uses its paired private key to unscramble the content. If a user owns multiple devices, such as an iPhone, an iPad, and a Mac, the sender's phone generates unique encrypted copies for each individual receiving device. The sender's phone duplicates the text payload, seals each copy with the specific public key belonging to each targeted piece of hardware, and delivers them simultaneously.
