|  |
Utimaco response to Princeton paper on data encryption
In response to the Princeton University paper on data encryption, Utimaco has issued the following statement. Please let us know if you have any questions or would like this copy in German.
There is truth in the vulnerability issue raised by the Princeton report and, in fact, it has been a known issue for some time. What is new is that by applying cooling techniques, the window of vulnerability is increased. Even with this discovery, however, the methods outlined below mitigate the security risks.
According to Utimaco Safeware this issue can be easily addressed by leveraging certain security policies, best practices and well designed encryption products. The opportunity for exposure occurs when a laptop or desktop is left unattended in a ‘power on’ state. Ensuring your computer is in hibernation mode or powered down prior to stepping away negates the vulnerability. In addition, employing ‘power on authentication’ further secures your data by requiring user re-authentication from either the ‘hibernate’ or ‘power off state’ to regain normal working mode.
Furthermore, additional protection can be achieved particularly against remote attacks with multi-factor authentication using cryptographic smartcards, tokens and biometrics, such as a fingerprint reader. For those requiring an even greater level of security, hardware security modules (HSM) can be deployed. HSM solutions, such as those offered by Utimaco, provide security that is physically tamperproof and has an active temperature sensing functionality.
This quote can be attributed to Martin Wulfert, CEO, Utimaco. 22.02.2008, Utimaco
Subscribe to the newsletter | | |
| | | |
