Comments on: Cellcrypt – Secure Voice for the Blackberry http://agilityloop.com/2009/05/15/cellcrypt-secure-voice-for-the-blackberry/ The musings of the agile on the world of tech and government Thu, 26 Aug 2010 19:39:39 +0000 hourly 1 http://wordpress.com/ By: Kevin Heald http://agilityloop.com/2009/05/15/cellcrypt-secure-voice-for-the-blackberry/#comment-16 Kevin Heald Mon, 18 May 2009 13:03:44 +0000 http://agilityloop.wordpress.com/?p=23#comment-16 Totally understand, and I figured you all could access the CAC or any smart card...the interfaces are pretty standard. The SME-PED will always be behind commercial devices for the reasons you mentioned. Sometimes I do wonder who really needs Type 1 and who can make do with something like your solution. Either way, thx for the comment! Totally understand, and I figured you all could access the CAC or any smart card…the interfaces are pretty standard.

The SME-PED will always be behind commercial devices for the reasons you mentioned. Sometimes I do wonder who really needs Type 1 and who can make do with something like your solution.

Either way, thx for the comment!

]]> By: Rodolfo http://agilityloop.com/2009/05/15/cellcrypt-secure-voice-for-the-blackberry/#comment-15 Rodolfo Sat, 16 May 2009 00:55:49 +0000 http://agilityloop.wordpress.com/?p=23#comment-15 One last thing, SME-PED still uses CSD and not IP which means that 1- the signaling call data is not secure 2- has an horrible performance in terms of network availability and voice latency. One last thing, SME-PED still uses CSD and not IP which means that 1- the signaling call data is not secure 2- has an horrible performance in terms of network availability and voice latency.

]]> By: Rodolfo http://agilityloop.com/2009/05/15/cellcrypt-secure-voice-for-the-blackberry/#comment-14 Rodolfo Sat, 16 May 2009 00:49:26 +0000 http://agilityloop.wordpress.com/?p=23#comment-14 Hi Kevin, thanks for your post about Cellcrypt. Plugging into an external PKI is certainly feasible - we already assumed that larger customers will want to use their own. This also means that implementing the DoD CAC would be a possibility. CAC is just x.509 and there is already out a Bluetooth smart card reader for the BlackBerry. Re SME-PED there is a fundamental difference in the goal we are trying to achieve. The SME-PED is a Type 1 encryption device, meaning that not just the communications are secure but the entire device (meaning both software and hardware) are certified to be secure and this include anti-tampering and TEMPEST shielding. This means that it has very long development cycles and has an endemic "old generation" feel to it. SME-PED is certified to carry information that is classified as Top Secret while Cellcrypt was designed for (Secret, Confidential, Unclassified but Sensitive). If you look at the bigger picture there are approx 30k-50k users of Type 1 devices in the Federal Government... and everybody else is not using any voice security whatsoever. We basically wanna fill that middle market without replacing your phone with a brick. Rodolfo (co-founder of Cellcrypt) Hi Kevin, thanks for your post about Cellcrypt.

Plugging into an external PKI is certainly feasible – we already assumed that larger customers will want to use their own. This also means that implementing the DoD CAC would be a possibility. CAC is just x.509 and there is already out a Bluetooth smart card reader for the BlackBerry.

Re SME-PED there is a fundamental difference in the goal we are trying to achieve. The SME-PED is a Type 1 encryption device, meaning that not just the communications are secure but the entire device (meaning both software and hardware) are certified to be secure and this include anti-tampering and TEMPEST shielding. This means that it has very long development cycles and has an endemic “old generation” feel to it.
SME-PED is certified to carry information that is classified as Top Secret while Cellcrypt was designed for (Secret, Confidential, Unclassified but Sensitive).

If you look at the bigger picture there are approx 30k-50k users of Type 1 devices in the Federal Government… and everybody else is not using any voice security whatsoever. We basically wanna fill that middle market without replacing your phone with a brick.

Rodolfo (co-founder of Cellcrypt)

]]>