Whisper Leak: How Encrypted AI Chats Still Leak Conversation Topics
From Adopting Zero Trust by Adopting Zero Trust
December 11, 2025 · 32 min · Season 4 · Episode 6
About this episode
This episode discusses the Whisper Leak issue affecting encrypted AI chats and its implications for secure AI systems.
In this episode, we break down Whisper Leak, a newly disclosed side-channel issue affecting encrypted LLM communications. JBO explains how attackers can infer conversation topics using packet size and timing metadata without breaking encryption. The discussion covers how the research team discovered the issue, how vendors (including Microsoft and OpenAI) mitigated it, and what it means for the future of secure AI systems. 01:30 – What Whisper Leak Actually Is 02:30 – Understanding Side-Channel Attacks 04:00 – Why LLMs Are Uniquely Vulnerable 08:00 – Stream Ciphers vs Block Ciphers 13:30 – “Did You Break Encryption?” Clearing Up Misconceptions 16:00 – Fixes & Mitigations Across LLM Vendors 18:30 – Why Some Vendors Were More Vulnerable Than Others 20:00 – Could High-End Adversaries Still Pull This Off? 24:00 – How API Users Can Protect Themselves 25:00 – Designing LLM Systems with Side Channels in Mind Guests: Jonathan (JBO) Bar Or, Principal Security Researcher, Microsoft Threat Intelligence, who just joined CrowdStrike Hosts: Elliot Volkman & Neal Dennis Hosted on Acast. See acast.com/privacy for more information.
People in this episode
Hosts: Elliot Volkman, Neal Dennis
Guest: Jonathan (JBO) Bar Or
Topics covered
- Whisper Leak
- encrypted LLM communications
- side-channel attacks
- LLM vulnerabilities
- security mitigations
- AI systems
Keywords
- Whisper Leak
- side-channel attacks
- encryption
- LLMs
- security
- packet size
- timing metadata
- mitigations
Mentioned in this episode
Organizations: Microsoft, OpenAI, CrowdStrike
More episodes of Adopting Zero Trust
- The Security Debt We Pretend Isn’t There · January 29, 2026 · 50 min
- How Critical Infrastructure Leaders Are Rethinking Cybersecurity · April 17, 2025 · 45 min
- Shadows Within Shadows: How AI is Challenging IT Teams · March 20, 2025 · 48 min
- Live at ZTW2025: Cyberwire Daily’s Dave Bittner + Dr. Zero Trust · March 6, 2025 · 33 min
- Rapid fire update: Silk Typhoon and DOJ's indictment of twelve Chinese nationals · March 5, 2025 · 3 min
- Predicting the year of cybersecurity ahead (minus regulations) · February 18, 2025 · 1h 3m
Explore listener stats, chart rankings, contacts and more on the Adopting Zero Trust podcast page.