Mils Electronic's After Delivery Modification Service Makes Algorithm Customisation Possible
29 July 2009
"Trust" in security terms is a difficult thing to achieve but clearly it is also a very desirable thing to have. So, how is it really possible to completely trust a commercial manufacturer? Apart from more obvious aspects like having a long, successful, relationship with the manufacturer of your IT security solution, transparency in your business relationship with them, and recognised certification is important. With after delivery modification (ADM) there is also the opportunity to personally and uniquely customise your security in such a way that the manufacturer has no knowledge of it. This gives you the utmost transparency with all the advantages and convenience of a reputable off-the-shelf product.
It is precisely because of this capacity for customisation that ADM is a very strong provider of greater levels of trust. ADM refers to the introduction of a cipher algorithm, which has been developed by the customer and placed within the mils secure messaging system. We offer ADM as a service, and to further win your trust, we will provide you with all the necessary training and tools to implement it yourself. Moreover, ADM becomes an aspect of your security that is not only unique to you but needs no involvement from us. As long as we provide you with all the support you need to implement ADM effectively, we need never know how you choose to encode your own system.
Originally we developed this new system from our extensive work with government organisations, for which trust in their security of information is absolutely crucial. During the process of developing ADM we had to ask ourselves some pretty tough questions. For example, how can a customer replace or modify a hardware algorithm without designing his or her own security device? Plus, how can a crypto manufacturer be certain that an algorithm introduced to a system after delivery (and therefore unknown to the manufacturer) still be a solid, trustworthy, solution? ADM was the perfect answer.
The ADM process
Information, training, development tools and a well structured procedure are provided by mils electronic to support the customer in carrying out the ADM of the secure messaging solution.
The most important items include:
Detailed documentation and explanation of the built-in framework for the block cipher pay-load encryption algorithm. On delivery, the essential building blocks of this algorithm are left empty, and it is the responsibility of the customer to develop and verify these blocks and to load them into the delivered security devices.
A programming guide for the implementation of an algorithm simulator, which is required for verification during algorithm development and for later cipher-check purposes in the field.
A software tool for verifying the developed building blocks and for loading these components into the security devices of the configuration.
All in all, ADM is a very hardworking and intelligent solution that has many practical uses in keeping sensitive information and communications exclusively yours. If you feel that your organisation would benefit from such a solution we would be very happy to talk more about it with you.
