India Claims Way to Monitor Corporate BlackBerry Emails Without Encryption Keys - N4BB

N4BB

India Claims Way to Monitor Corporate BlackBerry Emails Without Encryption Keys - N4BB

Last week we discussed that India claimed to have received the encryption keys from Research In Motion. By having the encryption keys, one can then access

Read the full story here

gtatech

I don't buy it. RIM encryption is the strongest, so show us some proof otherwise talk is cheap.

StephenBB81

So I Guess FIPS needs to reevaluate their ranking system.

Since India in such a short time has done what no one has done before them

StephenBB81

This has to be a Bluff,
Since each Company will use a unique key, India would have to Brute force each company, with 256bit AES encryption.

India has 5 of the worlds top 500 Super computers their Best Being the SAGA-220 ranked 58th in the world doing 220 TFlops, India would need 100 of these computers to match the speed of the worlds fastest computer,
and the US with the Worlds fastest computer can't break AES 256.. hmmmm

Virmaline

I've always been skeptical about the purported non-existence of a built-in back door to BES communications, a back door to which certain powerful, developed nations have access. RIM can claim all day that it doesn't have the keys, and it may very well be true that RIM doesn't have the keys, but that doesn't mean someone else doesn't have back door access. Consider the possibility that RIM has been told that it must provide a back door to all communications to a third party (think some unheard of CarrierIQ type private entity) that members of the club (USA, Canada/UK, and maybe some others) have access to. Consider the possibility that RIM must (and does) comply lest it simply won't be allowed to sell phones and/or operate in those markets. If such a back door exists, and India and Arab nations are aware of it, it's very possible these nations are squawking because they, too, want to sit at the big kids' table.

People are always reasoning and drawing the conclusion that there's no back door because those with BES can simply be ordered to turn over the keys in accordance with some warrant. But that reasoning pre-supposes that all BES users are law abiding corporations who would comply with court orders. Will organized crime turn over its servers or BES keys? Will "terrists" comply with court orders and hand over BES servers stashed in difficult to reach places in less cooperative countries? When one takes this into consideration, it becomes ludicrous to conclude that the superspy known as the United States doesn't have quiet back door access to all BES communications. And though I have no love for organized crime or terrists, I sincerely hope no such back door exists.