Video Screencast Help
Search Video Help Close Back
to help

Encryption Blog

Showing posts in English
Kelvin_Kwan | 05 Nov 2012 | 1 comment

A few recent headlines (Google translated link) have suggested that PGP encryption can be broken. My first reaction was with a sigh: “Not this again!” Such claims have been made before, and so far not a single one has proven true. Thus far, that seems to be the case here.

Breaking “PGP Crypto” Means Breaking AES
First, remember that PGP products do not use a custom encryption algorithm. They are based on well-studied, standard algorithms such as RSA and AES, at bit lengths that are regarded as best practices for strong security (2048-bit RSA keys and...

Kelvin_Kwan | 05 Nov 2012 | 1 comment

Passware recently blogged about the ability to "instantly decrypt PGP Whole Disk Encryption" with their latest release of Passware Kit 11.7.

Based on deeper investigation from Symantec engineering, it has been concluded that a properly configured PC is not vulnerable to this Passware claim.

A Whole Disk Encrypted machine is not vulnerable to an offline attack. If an attacker was to steal a machine in an offline state (powered off or hibernating state) the first place they would look for the key information is in the hibernation file or crash dumps. The problem, however, is that this is only possible if the PC was not encrypted at the disk block level. You cannot get to the hibernation file or the crash dumps since this information is in an encrypted state, and you would need to authenticate to the disk first to get to...

Tim_Matthews | 05 Nov 2012 | 3 comments

 

With the end of 2011 upon us, one thing is sure: the mobile revolution is in full swing. Smartphones and tablets are everywhere.

In fact, according to the analyst firm Gartner, sales of smartphones will exceed 461 million this year – surpassing PC shipments in the process – and rise to 645 million in 2012. Combined sales of smartphones and tablets will be 44 percent greater than the PC market by the end of the year. Beyond 2011, Gartner says the rise in tablet use will jump to 900 million by 2016.

These devices are not just becoming mainstream, they are penetrating nearly every aspect of our lives. More importantly, for many the line between personal and business devices has been blurred, or erased altogether. More often than not, a single device is used for both personal and business activities, with Gartner also predicting that 80 percent of professionals will use at least two personal devices to access corporate systems and data by 2014....

Kelvin_Kwan | 05 Nov 2012 | 23 comments

It has come to Symantec's attention that an OS X 10.7.3 update release is imminent from Apple.

Based on past experiences, we do NOT recommend users currently encrypted with PGP WDE or SEE FDE for Macs upgrade to OS X 10.7.3 when made available by Apple.

Symantec is actively testing PGP WDE and SEE FDE against the 10.7.3 developers build from Apple. We will continue testing against all developers code from Apple and also against the official release from Apple.

Please check this blog for updates as they become available.

Kelvin_Kwan | 05 Nov 2012 | 0 comments

Apple released a new generation of MacBook Air notebooks and Mac mini desktops in mid-2011.  These latest releases of MacBook Air notebooks and Mac mini desktops have a known issue with Symantec PGP Whole Disk Encryption. Symantec Engineering has isolated this issue down to specifically the latest version of Mac Book Air notebooks 4.2 with the Intel Core i5 and i7 processors and the mid 2011 versions of the Mac mini desktops 5.1, 5.2, and 5.3 with the Intel Core i5 and i7 processors.

We have successfully tested and verified that PGP Whole Disk Encryption 10.2MP1 works with all MacBook Air notebooks and Mac mini desktops and the Lion OS X operating system prior to the latest releases of these MacBook Air notebooks and Mac mini desktops.

An easy way to distinguish the latest generation of Mac Book Air notebooks and Mac mini desktops are to look for the presence of a Thunderbolt...

Kelvin_Kwan | 05 Nov 2012 | 4 comments

 

As many of you know, the Trusted Computing Group (TCG) was an initiative started by some well-known technology companies to help standardize and implement Trusted Computing.  One of the first “products” to come from this was the Trusted Platform Module (TPM).  There are various vendors that take advantage of the TPM chip for security related functions.  (Full disclosure:  Symantec is a member of the Trusted Computing Group.)

The next significant “product” to come from TCG is the Opal standards for Self Encrypting Drives (SED).  The Opal standard is an industry standard for any hard disk drive (HDD) manufacture to sell SEDs that would comply with these standards.  Now what this means, is that these HDDs will have encryption already built into the hardware.

“Great!  We won’t need to evaluate any of the software encryption vendors out there.  We can simply just buy SEDs from the...

Brian Tokuyoshi | 05 Nov 2012 | 1 comment

One of the most unusual aspects of the Apple iOS devices is the aspect of how user demand is driving enterprise adoption. Even in corporations where the iPad or the iPhone are not a part of the enterprise standard, it’s not unusual to see employees bringing their own devices to work and making it a part of their business life. For example, a sales manager that has an iPad typically wants to take it on a business trip and read their email. This may include weekly sales forecasts, contracts, and customer data. While having this type of information on the go may be convenient, it poses a security concern for the IT organization that now needs to make sure that sensitive corporate data stays protected on an employee’s personal device.

In order to protect the corporate data, it makes sense to use email encryption to protect data en route and resident on a portable device. Encryption protects the privacy of the information by making use of cryptography to ensure that...

Kelvin_Kwan | 05 Nov 2012 | 14 comments

 

Now before I begin “The Chicken or the Egg” portion of the blog, I want to address an issue that many people are asking or wondering.  “Why must I first decrypt before upgrading to Lion?”  Well there are many reasons.  However, one of the biggest reasons is that in Lion, Apple has added Recovery Partition Support.  This Recovery Partition allows you to perform repairs and recovery to your Mac without having to find the DVD that came with your Mac.  This is important, because whenever your system is encrypted, it is NOT advisable to create, resize, or move partitions.  This is regardless if you’re running OS X, Windows, or Linux.  Bad things (e.g.  Data integrity issues) tend to happen when encrypted and you do partition modifications.  So, Symantec...

Kelvin_Kwan | 05 Nov 2012 | 2 comments

As you might have seen or heard, Symantec recently announced new features to our encryption products.   I’ll give you a quick run down of some of the highlights of this latest release.

One of the most exciting features is the introduction of Symantec PGP Viewer for iOS.  This has been one of the most asked for feature by customers who need a solution to  “My CxO wants to be able to read encrypted emails on their iPad or iPhone.”  Well, it can now be done with the PGP Viewer for iOS.  You can decrypt your emails locally on your iPad, iPhone, and iPod Touch devices now.  Best of all, the PGP Viewer is free from the Apple App Store (expected to be in the App Store by late summer.) It does require PGP Universal Server for key management, so wait until you get information from your mail administrator before you install it.

Another really cool feature is the ability of Symantec Endpoint Encryption Full Disk Edition (SEE FDE)...

Kelvin_Kwan | 05 Nov 2012 | 0 comments

 

We are once again writing to follow-up on our early post related to a similar issue from January.  This time, it’s for Mac OS X upgrades to Apple’s just released 10.6.8 update and PGP Whole Disk Encryption for Macs. 

Much like the previous post, Apple’s automated Mac OS X 10.6.8 Software Update mechanism bypasses the protections of PGP Corporation had put around a critical file needed for normal system startup.  This time however, users who are running 10.1.1-Build 10 and newer had no problems with the Apple 10.6.8 update as expected.  Users running older versions, however, ran into problems.

As communicated previously, the PGP Engineering team discovered that the Apple automated Software Update mechanism bypassed the protections PGP built-in to protect the boot.efi file.  This...