Client Registration
At registration time, a WhatsApp client transmits its public Identity Key, public Signed Pre Key (with its signature), and a batch of public One-Time Pre Keys to the server . The WhatsApp server stores these public keys associated with the user’s identifier. At no time does the WhatsApp server have access to any of the client’s private keys. for more client login nformation please just give a click on client login
Exchanging Messages
Once a session has been established, clients exchange messages that are protected with a Message Key using AES256 in CbC mode for encryption and HMAC-SHA256 for authentication .
whatsApp web.
The Message Key changes for each message transmitted, and is ephemeral, such that the Message Key used to encrypt a message cannot be reconstructed from the session state after a message has been transmitted or received .
The Message Key is derived from a sender’s Chain Key that “ratchets” forward with every message sent . Additionally, a new ECDH agreement is performed with each message roundtrip to create a new Chain Key . This provides forward secrecy through the combination of both an immediate “hash ratchet” and a round trip “DH ratchet .”
Statuses
WhatsApp statuses are encrypted in much the same way as group messages. The first status sent to a given set of recipients follows the same sequence of steps as the first time a WhatsApp group member sends a message to a group . Similarly, subsequent statuses sent to the same set of recipients follow the same sequence of steps as all subsequent messages to a group . When a status sender removes a receiver either through changing status privacy settings or removing a number from their address book, the status sender clears their Sender Key and starts over