Blackberry ENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES Guide de l'utilisateur télécharger pdf (Page 64)

d. sends y

to the BlackBerry device

9. One of the following actions occurs:

• The BlackBerry Enterprise Server and BlackBerry device open an authenticated connection to each other if the

BlackBerry device accepts y

• The BlackBerry device does not accept the connection request, and the BlackBerry Enterprise Server and BlackBerry

device do not open an authenticated connection to each other, if the BlackBerry device calculates the following:

≠

• The BlackBerry Router does not accept the connection request if the BlackBerry Router calculates the following:

≠

• The BlackBerry Enterprise Server does not accept the connection request if the BlackBerry Enterprise Server calculates

the following:

≠

• The BlackBerry Router stores R

, R

, y

P + e

, e

, and e

if the BlackBerry device accepts y

10. The BlackBerry Enterprise Server stores R

, R

, e

, and h.

11. The BlackBerry Router overwrites y

and y

in memory with zeroes.

12. The BlackBerry Enterprise Server overwrites y

, y

, and r

in memory with zeroes.

13. The BlackBerry device overwrites y

, y

, and r

in memory with zeroes.

Cryptosystem parameters that the BlackBerry Router protocol uses

The BlackBerry® Router, BlackBerry® Enterprise Server, and BlackBerry device are designed to share the following cryptosystem

parameters when they use the BlackBerry Router protocol.

Parameter Description

E(Fq) This parameter represents the NIST approved 521-bit random elliptic curve over Fq, which has a

cofactor of 1. The BlackBerry Router protocol does all math operations in the groups E(Fq) and Z

Fq This parameter represents a finite field of prime order q.

P This parameter represents a point of E that generates a prime su/jointfilesconvert/284387/bgroup of E(Fq) of order p.

xR This parameter represents the elliptic curve scalar multiplication, where x is the scalar and R is a

point on E(Fq).

s This parameter represents the value of the device transport key.

h This parameter represents the SHA-512 hash of s.

Security Technical Overview

1 2 ... 59 60 61 62 63 64 65 66 67 68 69 ... 143 144

Commentaires sur ces manuels

Pas de commentaire

Blackberry ENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES Guide de l'utilisateur Page 64

Commentaires sur ces manuels

Produits connexes et manuels pour Logiciel Blackberry ENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES