Mobile Encryption

1
Mobile Encryption

• Group Discussion and Written Project CDI East
  2006

Rick Smith rdsmith_at_mac.com Rick Wanner
rwanner_at_pobox.com
2
Agenda

• Encryption Options
• Evaluation Criteria
• Recommendations
• SDLC
• Conclusions

3
Encryption Options

• Full-disk Encryption
• Hardware-based Encryption
• Seagate
• Virtual Disk Encryption
• File Encryption
• EFS in Microsoft Windows XP/2003

4
Evaluation Criteria

• Operating Systems Supported
• Ease of Deployment
• Transparent to User
• Centralized Management
• Ease of Management
• Strength of Encryption
• Key Management and Recovery
• Audit Logging
• Cost

5
Solution Recommendations

• SafeBoot
• Device Encryption for
• PC/Laptop
• Windows Mobile
• VDisk
• Management console
• Web Based
• User self-service pasword resets
• AES-256

• PointSec
• Versions for
• PC
• PocketPC
• Removable Media
• Management console
• No user self-service
• FIPS 140-2 compliant

6
System Development Life Cycle

• Documents investigation to date
• Need to continue with in-house testing of
• Key recovery/escrow and password reset
• Management console usability
• Impact on users
• Implementation and deployment to follow
• Need to consider including desktops and servers

7
Conclusions

• Recommendations
• SafeBoot
• PointSec
• Implementation starting with high value laptops
  and mobile devices
• Policy development also required to support -
  need to start now