Mobile and Desktop Platforms Using Legacy RSA-Based Security can Incorporate Robust Elliptic Curve Protection for Data and Communications
San Jose, CA – May 14, 2013 – SPYRUS, Inc. announced today that Israeli patent 198362, “Method and System for Deploying Advanced Cryptographic Algorithms,” has been issued to the company. The Israeli patent is based on US Patent 8,009,829, issued to SPYRUS on August 30, 2011. Additional patents are pending in Europe and India. These patents describe a means of strengthening protection against attacks on cryptographic keys, digitally signed data, and identity authentication methods in mobile, desktop, and embedded computing platforms.
The invention described by the patent is a Limited Change Scenario (LCS) system and associated processes for incorporating a strong Elliptic Curve Cryptography (ECC) key within a weaker but longer RSA public key in a completely transparent manner by using automatic substitution and watermarking techniques. Although still widely used for information security, RSA public key encryption and authentication algorithms were developed over 30 years ago and have come under increasingly successful attacks. With the LCS system, both the RSA and ECC signatures are verifiable, but the ECC signature is expected to resist attack for at least another 160 years.
The system and method claims described in the LCS patents support the implementation of the stronger, more computationally efficient, and NIST- and DoD-approved “Suite B” cryptographic information protection for software products based on Microsoft Windows, Linux, Android, and Mac OS, as well as legacy hardware-based products. Such protection is particularly important because resources available to nation-state attackers increase the likelihood of continued successful penetration attacks upon legacy algorithms.
The LCS patents provide means to deploy and validate a certificate that carries a stronger ECC key embedded within existing, globally deployed RSA-based public key infrastructures where the current investment in RSA-based PKI systems precludes the direct replacement of software, hardware, and policies. Incorporating new ECC cryptographic algorithms directly would otherwise be incompatible with most existing PKI security systems.
The 25 claims in the patent also describe several methods in which other proprietary or even classified algorithms could be introduced or substituted within an existing infrastructure.
This latest set of LCS patents adds to the growing worldwide portfolio of SPYRUS patents that enable solutions for secure authentication, secure communication, full disk encryption, data protection, and rights management for digital content.
About SPYRUS, Inc.
SPYRUS has provided hardware-encrypting BYOD solutions for mobility markets since 2009, starting with componentized Windows XP, Windows 7, and now with Microsoft certified Windows 8 on the Secure Portable Workplace™. Only SPYRUS Trusted Mobility solutions protect data at rest, in transit, and in use for PC, tablets, and smartphones using advanced elliptic curve cryptography. All security products are made in the USA, patent protected, designed to meet FIPS 140-2, and can be centrally managed. SPYRUS is headquartered in San Jose, California. See www.spyrus.com for more information.
SPYRUS Media Contact:
Madison Alexander PR, Inc.
(949) 231-2965 (cell phone)