« What's going on? | Main | Getting predictable outcomes »

Tuesday, 23 September 2008

Was BlackBerry encryption really defeated?

The Economic Times has reported that the Indian government has developed the ability to read BlackBerry messages. If this is actually true, there are at least three ways in which this could have been done. Some are more likely than others. It's unlikely that the Indian government will tell us exactly how it can read BlackBerry messages, but we can probably get a good idea of what they actually can do.

The least likely way is that the Indian government actually developed a way to beat the encryption used by the BlackBerry devices. This is extremely unlikely. The encryption used by these devices is so strong that it's probably impossible for the Indian government to beat it.

Another possibility is that they might have found a way to defeat the key management used by the BlackBerry devices. It's almost always easier to attack key management that to attack encryption. It's possible that they found a way to do this, but it's still unlikely.

A third way is that the Indian government found a way to intercept BlackBerry messages when they're unencrypted. In most cases, the BlackBerry encryption just protects messages when they're transmitted wirelessly and doesn't protect them once they've moved off a wireless network. This means that there are lots of opportunities to intercept and read plaintext messages. This is relatively easy, and is probably what the Indian government managed to do.

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00e55375ef1c8833010534c8487b970c

Listed below are links to weblogs that reference Was BlackBerry encryption really defeated?:

Comments

Post a comment

If you have a TypeKey or TypePad account, please Sign In.

Voltage Data Breach Index

  • Grab the Voltage Data Breach Index

September 2010

Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30