Content deleted Content added
m DNB, likely misplaced, note: https://d-nb.info/110368003X i.e. they do use ISBN, I could only look that up not "DNB" number |
CortexFiend (talk | contribs) Link suggestions feature: 2 links added. |
||
| (4 intermediate revisions by 4 users not shown) | |||
Line 2:
'''Multiple encryption''' is the process of [[encryption|encrypting]] an already encrypted message one or more times, either using the same or a different algorithm. It is also known as '''cascade encryption''', '''cascade ciphering''', '''multiple encryption''', and '''superencipherment'''. '''Superencryption''' refers to the outer-level encryption of a multiple encryption.
Some cryptographers, like Matthew Green of [[Johns Hopkins University]], say multiple encryption addresses a problem that mostly doesn't exist:
{{Blockquote
Line 37:
==The Rule of Two==
The '''Rule of Two''' is a [[data security]] principle from the [[National Security Agency|NSA's]] Commercial Solutions for Classified Program (CSfC).<ref>{{cite web |url=http://www.nsa.gov/ia/programs/csfc_program/ |title=Commercial Solutions for Classified Program |publisher=US National Security Agency |access-date=24 December 2015 |quote= |archive-url=https://web.archive.org/web/20151225183650/https://www.nsa.gov/ia/programs/csfc_program/ |archive-date=25 December 2015 |url-status=dead }}</ref> It specifies two completely independent layers of cryptography to protect data. For example, data could be protected by both hardware encryption at its lowest level and software encryption at the application layer. It could mean using two [[Federal Information Processing Standards|FIPS]]-validated software cryptomodules from different vendors to en/decrypt data.
The importance of vendor and/or model diversity between the layers of components centers around removing the possibility that the manufacturers or models will share a vulnerability. This way if one components is compromised there is still an entire layer of encryption protecting the information at rest or in transit. The CSfC Program offers solutions to achieve diversity in two ways. "The first is to implement each layer using components produced by different manufacturers. The second is to use components from the same manufacturer, where that
manufacturer has provided NSA with sufficient evidence that the implementations of the two components are independent of one another."<ref>{{cite web |url=https://www.nsa.gov/Portals/70/documents/resources/everyone/csfc/capability-packages/MACPv2_1.pdf/ |title=Mobile Access Capability Package |publisher=US National Security Agency |access-date=28 February 2020 |quote=}}</ref>
The principle is practiced in the NSA's secure mobile phone called Fishbowl.<ref name=":0">{{cite book | last=Adams | first=David | last2=Maier | first2=Ann-Kathrin | title=Big Seven Study (2016): 7 open source Crypto-Messengers to be compared (English/Deutsch) | publisher=BoD – Books on Demand | publication-place=Norderstedt | date=2019-10-23 | isbn=978-3-7504-0897-5 | url=https://phoenixnap.dl.sourceforge.net/project/goldbug/bigseven-crypto-audit.pdf}}</ref> The phones use two layers of encryption protocols, [[IPsec]] and [[Secure Real-time Transport Protocol]] (SRTP), to protect voice communications. The Samsung [[Galaxy S9]] Tactical Edition is also an approved CSfC Component.
==References==
{{Reflist}}
==Further reading ==
| |||