BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 11-01-2006, 11:03 AM   #1 (permalink)
New Member
 
Join Date: Nov 2006
Model: 7290
Carrier: T-mobile
Posts: 8
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Content Protection

Please Login to Remove!

We are investigating the idea of encrypting the data on the Blackberry devices. We currently use a product, Credent, on our desktop systems and they have a option for the Blackberry. I see that the Balckberry device has a encryption option, but I have not found any details on what it does and what form of encryption is used.

So, if anyone has details about this please let me know.

Thanks
Offline  
Old 11-01-2006, 02:33 PM   #2 (permalink)
BlackBerry Extraordinaire
 
srl7741's Avatar
 
Join Date: Dec 2005
Model: Bold
Carrier: AT&T
Posts: 1,641
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

try this thread.

Content Protection Flag?

not much but it may help some.
__________________
BB-Bold
PIN: Retired
Google Talk: srl7741
Offline  
Old 11-01-2006, 06:49 PM   #3 (permalink)
BlackBerry Extraordinaire
 
Join Date: May 2005
Location: Waterloo: Home of RIM
Model: PlayB
Carrier: Bell Mobility
Posts: 1,008
Post Thanks: 1
Thanked 4 Times in 3 Posts
Default

"Content Protection" simply prevents the name of callers from displaying when the device is locked.

For true protection of your device's data, I suggest a 3rd party solution, such as the one mentioned.
Offline  
Old 11-02-2006, 12:41 AM   #4 (permalink)
Knows Where the Search Button Is
 
Join Date: Jan 2005
Location: Melbourne, Australia
Model: 8700
Posts: 20
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by Jase88
"Content Protection" simply prevents the name of callers from displaying when the device is locked.

For true protection of your device's data, I suggest a 3rd party solution, such as the one mentioned.
Er... No it doesn't

Content protection will encrypt the contents of the Blackberry device with a 256bit AES key. There are also a couple of other keys used to encrypt / decrypt messages when the device is locked and access to the AES key used to encrypt the main data store is not available, and this is where the option in the BES content protection IT policy come in. They allow you to set 3 key strengths for this stage of the encryption, 160bit 283bit and 571bit and the stronger the key, the larger the password that locks the device has to be.

Also, if you forget your password and you have content protection enabled, you can't reset it from the BES, you have to wipe the handheld.

One of the bigger drawbacks is that because everything is encrypted, everytime you want to open an email or calendar item, the blackberry has to decrypt it. Then when you're done, it has to encrypt it again, and I've seen this almost kill a 7230.

Another side effect as you've noted is that because when the device is locked, you can not access the address book (as it is encrypted using a key that you don't currently have access to) it will not be able to show you the name of a caller when they call you.

Overall it's a great strength to the blackberry, and I wouldn't bother looking at anything else until you've tried it, but it does have side effects...
Offline  
Old 11-03-2006, 09:54 PM   #5 (permalink)
BlackBerry Extraordinaire
 
Join Date: May 2005
Location: Waterloo: Home of RIM
Model: PlayB
Carrier: Bell Mobility
Posts: 1,008
Post Thanks: 1
Thanked 4 Times in 3 Posts
Default

I know the party line is that "Content Protection" does indeed encrypt content. However, with content protection enabled, I'm still able to create a backup file which clearly shows email and contacts in plain text format. Is the device decrypting data during the backup process? If so, this is not a secure solution.
Offline  
Old 11-04-2006, 01:37 AM   #6 (permalink)
Knows Where the Search Button Is
 
StarmanDX's Avatar
 
Join Date: Oct 2006
Location: Norfolk, VA
Model: 8330
OS: 4.5
Carrier: Sprint
Posts: 49
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

You have to enter the device password to connect the device before you can generate a backup

Obviously, if you don't have a device password set then content encryption is kind of useless.
__________________
BB 7130e on Sprint
PIN: 3012F891
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.