CyProtect AG News

12.07.2002 - 'State Secret" made by CyProtect AG: patented PMC

Polimorphic encryption method for highest security needs

With PMC, a polymorphic encryption method, the in Munich, Germany, located CyProtect AG offers one in Germany patented, high secure and fast encryption algorithm. The new technology is offered now within the new CyProtect product called CyProtect Disk Encryption (CyDisk).

No chance -
self-changing algorithm and no second key

It is a fact that after coding with PMC, there is no second key available for the encrypted data (Masterkey). This makes the product almost unhackable if you would use the known hack- and decoding methods. Even the inventor himself is not able to brake the encryption. Moreover the engaged technology enables the process to vary with the key and offers no computable way for attacks by attemping different decryption methods.
This is especially interesting for companies and corporations, which are working with high sensitive data and informations on a high level, and which set security as highest priority. Thus the product is also ment for public institutions, governments and science-evolution, for universities and research laboratories.

Very simple handling
Special features of PMC are easy installation and handling. The product is installed and working within 2 minutes. Supported are harddisk-partitions and virtual file containers. With an encrypted volume you can work as transparent like as you would be working with a normal drive.

Support of USB-keys and biometrical systems
Besides the normal way of entering a password (with all the pro and contras) the encryption can be activated also through Rainbow iKeys as well as through combined smartcard/fingerprint-system from Precise.

More secure and faster as DES and AES
A test of RSA Data Security Inc. (San Mateo, California) in 1999 did proove, that in less than 22,5 hours a DES 56 Bit algorithm is brute force hacked (testing of all key-combinations). PMC is secured against disassembling and analyzing of the instruction sequence, because the order of the instruction commands itself is a variable and is only for short time clear defined. The Crypto-compiler can be analyzed, but not the direct method, with which the data is encrypted.

Also the speed of PMC is much faster compared against the traditional crypto-tools. The self compiling crypto-code of CyProtect is able to encrypt data with a speed of 50 MBit/s and a keylenght of 4096 bit on an Intel Pentium II processor with 200 MHz frequence.

The technique - attack security of PMC

The key which is choosen from the user is assigning the look of the crypto basic functions, which can be compiled to code blocks. Wenn von der Annahme ausgegangen wird, ein Crypto-Compiler verfüge lediglich über 4 Codeblöcke und 16 dieser Blöcke könnten zufällig aneinander gereiht werden, so wären 416 = 4294967296 verschiedene Möglichkeiten für den resultierenden Verschlüsselungs-Algorithmus gleichermaßen wahrscheinlich. Bei 128 aneinander gereihten Codeblöcken stünden somit 4128 = 1,158 x 1077 Möglichkeiten zur Verfügung. Ein konventioneller 128 Bit-Algorithmus verfügt lediglich über 3,403 x 1038 mögliche Schlüssel-Varianten.

Um traditionelle kryptographische Methoden mit der polymorphen Methode vergleichen zu können, muss der gesamte Schlüsselbereich und die Arbeitsgeschwindigkeit verglichen werden. PMC rechnet mit 4096 Bit genauso schnell wie ein konventioneller 256-Algorithmus.
CyProtect Disk Encryption mit 256 Bit-Schlüssel ist derart schnell, dass ein Anwender keinerlei Geschwindigkeitsverlust verspürt (am einfachsten zu testen mit einem Video). 4096 Bit-Verschlüsselung wird in der demnächst verfügbaren Email-Verschlüsselung verwendet.
Preise und Verfügbarkeit

Die CyProtect Disk Encryption ist für Windows 2000 und Windows XP sowie für beliebig grosse Laufwerke konzipiert. Ab sofort ist das Produkt auf der Web Site von CyProtect für Euro 75 via Download zu beziehen. Preise für Unternehmens-Lizenzen sind direkt bei CyProtect zu erfragen.
CyProtect wird in Kürze das Verfahren in drei weiteren Produkten auf den Markt bringen: Mail-Encryption ohne aufwendige und kostspielige Public Key Infrastruktur, File-Encryption und Encryption Suite.