Re: Definition of Military / Government grade ciphers

From: Albert P. Belle Isle (belleisl_at_CerberusSystems.com)
Date: 05/30/03 

Date: Fri, 30 May 2003 01:26:46 GMT

On 28 May 2003 18:08:55 -0700, nationalsecurity@softhome.net
(majikcypher) wrote:

>Most of the different ciphers I use to encrypt my files are labeled as
>"Military Grade" or "government Strength". But exactly what does this
>mean (and NO i don't mean do they USE the type of encryption because
>that is sort of obvious and I know that it means that it passes their
>little test of how good it should be but I want to know exactly how
>good it has to be to be given this name)? Also what do you think are
>the strongest algorithms (publicly). I like Blowfish and Rijndael.

Cryptographic products for the protection of DoD Classified
information (TYPE I cryptosystems) are provided by NSA from a standard
list under a rigorous system of inventory and management. More
importantly, all the keying material used in them must be provided by
NSA through that same accounting and protection system.

For Sensitive-But-Unclassified information (For Official Use Only
data, Privacy Act data, FedWire money transfers, etc.) approved TYPE
II cryptosystems may be used. This includes FIPS 140-certified
cryptosystems employing FIPS 46-3 (the Digital Encryption Standard
which now specifies the TDEA cipher - "3DES" - in an approved mode).

People who use the meaningless marketing term "military grade" seldom
have any connection with (or understanding of) what the US military
uses.

Albert P. BELLE ISLE
Cerberus Systems, Inc.
================================================
ENCRYPTION SOFTWARE with
  Forensic Software Countermeasures
    http://www.CerberusSystems.com
================================================

Relevant Pages

  • Re: RSA keys, encryption and PGP-like cryptosystems
    ... relationship between RSA keys and encryption keys in PGP-like cryptosystems? ... That's the way a lot of cryptosystems work. ... I first have to generate an RSA key for myself. ... commenting on the probablility of such an attack, ...
    (sci.crypt)
  • Re: your assistance is requested
    ... do not use this program for encryption! ... I wouldn't necessarily trust it as an arbiter of randomness either. ... ME6 is the best cryptosystem out there. ... ME6> all other cryptosystems. ...
    (comp.compression)
  • Re: Encryption level vs Width of cryptographic key
    ... > Is it always the case that the level of encryption will be linear to ... function, not a linear one. ... almost always been vastly faster ways to crack ... cryptosystems, sometimes sub-linear in key ...
    (sci.crypt)
  • Re: Cryptography problem
    ... > cryptosystems are pretty much immune to it (since Kasisky's days it ... > key - even if the attacker knows the exact encryption algorithm and ... Each request could be spaced minutes or even days apart. ... I'll take a look at OpenSSL. ...
    (comp.security.misc)
  • Re: Cryptography problem
    ... > cryptosystems are pretty much immune to it (since Kasisky's days it ... > key - even if the attacker knows the exact encryption algorithm and ... Each request could be spaced minutes or even days apart. ... I'll take a look at OpenSSL. ...
    (comp.security.misc)