Encryption and Security Devices

International Journal of Micrographics & Optical Technology, 2008

Cryptographic Library Awarded FIPS 140-2 Government Security Certification

BeCrypt has announced that its new Cryptographic Library has been certified through the Cryptographic Module Validation Program (CMVP) at FIPS 140-2 Level 1.

The CMVP is a joint effort between the US Government's National Institute of Standards and Technology (NIST) and the Communications Security Establishment Canada (CSEC). It validates cryptographic modules to Federal Information Processing Standards (FIPS). Modules validated as conforming to FIPS 140-2 are accepted by the Federal Agencies of both countries for the protection of sensitive information.

The BeCrypt Cryptographic Library provides support for all of BeCrypt's data security solutions requiring assured cryptographic functionality and services, which means that the full range of innovative BeCrypt products are now available for the US and Canadian Federal governments and any organisations requiring a FlPS-compliant solution. In addition, the BeCrypt Cryptographic Library will be available for software partners and third-party organisations to integrate and enable their solutions with FIPS 140-2 certified encryption.

BeCrypt says its products will aid the UK Public Sector to comply with the Mandatory Minimum Measures where FIPS-validated solutions are a requirement for handling personally identifiable data. They will also help Local Authorities to meet the Code of Connection (CoCo) requirements for the Government Connect Secure Extranet (GCSx), which is to go live on 31 March 2009. In addition, BeCrypt now has a full range of solutions for commercial organisations that require assured data security products where full CESG CAPS approved solutions would be inappropriate.

Dr. Bernard Parsons, CEO of BeCrypt said "The US and Canada are an extremely important part of the global market for BeCrypt solutions, and achieving FIPS 140-2 validation is an example of BeCrypt's deep commitment to the North American market. FIPS validation is also important for our own domestic market where assured solutions are a requirement for both public sector and commercial organisations.

"In addition to our solutions, architecting and certifying our Cryptographic Library enables our integrated technology and OEM partners to offer FIPS compliant solutions."

BeCrypt worked with DOMUS IT Security Laboratory to complete the certification. The BeCrypt Cryptographic Library is listed on the NIST website at http://csrc.nist.gov/groups/ STM/cmvp/documents/140-1/1401val... under ID certificate number 1025.

The Library

BeCrypt say that the Cryptographic Library fully complies with NIST standards for cryptographic modules and offers AES 128 and 256 encryption. It is integrated with the following BeCrypt solutions enabling them with FIPS certified encryption.

* DISK Protect - Full disk and removable media encryption for Windows and Linux

* PDA Protect - User authentication and storage encryption for WinMobile PCs and PDAs

* BeCrypt Media Client - Zero footprint media encryption for CD/DVD and USB storage

* Trusted Client - Secure remote access solution for Teleworking and business continuity.

The Cryptographic Library is available to third-parties to integrate and enable their solutions with FIPS certified encryption.

Contact BeCrypt.

Web: www.becrypt.com

Solution Encrypts and Destroys Laptop Data

UK-based company, Virtuity, has released a major new version of its "self destruct" information assurance tool. BackStopp 2.0 is based on and retains the original features of version 1 , using the most effective transport to locate a lost or stolen computer and to destroy all its data. A host of additional safeguards have been added to protect sensitive information, including data encryption integration, destruction of vital system files to disable laptops, SMS alerts, holiday protection and integration with HR systems.

BackStopp 2.0 restricts access to sensitive data to authorised users, and ensures that when computers are stolen or stray outside authorised areas, their data is erased before it can be accessed. The product uses a number of channels, including GSM, WiFi and RFED to monitor the electronic "heart beat" of a device, and uses them to send a signal to the device that data should be destroyed. Recent dramatic sales increases show that laptops are the key target for Backstopp, although any computer can be protected using the same approach.

Integrated Encryption

BackStopp 2.0 now provides integrated volume encryption, meaning that data is unreadable even if thieves attempt to recover it from a device's components. All files and directories in the BackStopp protected volume remain encrypted until the moment of legitimate use, meaning that any thief who attempts to deactivate the Backstopp communication channels or remove the hard disk will find nothing more than highly encrypted data.

In addition, BackStopp 2.0 can now command machines to delete their Windows boot files, rendering the device totally useless to the casual thief and dramatically reducing its resale value.