FIPS Validation
FIPS-140-2 validation is a requirement to sell into the federal sector. I established and remain responsible for obtaining and maintaining validations for NIST Cryptographic Module Validation Program (CMVP) FIPS-140-2 and algorithm validation (CAVP). Drafted Security Policy, designed, developed, and integrated code changes necessary to meet such certifications and established internal standards to make these certifications a standard part of the development process.
PGP Software Development Kit (PGP SDK)
4.0 - IN PROGRESS
3.12 1101 3/11/09
3.11 1049 10/17/08
3.10.3 1049 10/17/08
3.8.1 765 10/22/07
3.7.1 765 05/02/07
3.5.3 630 03/03/06
PGP Cryptographic Engine 4.0
Also known as the mini SDK, used in kernel mode operations such as the Whole Disk Encryption. FIPS validation of both the algorithms and module was required for both Common Criteria status and selling WDE into the Federal market.I added in FIPS-140 support to the mini SDKand repackaged it as the PGP Cryptographic Engine 4.0.This involved adding in states for FIPS FSM and integrity and self test support for FIPS mode.Validated t the code on Windows,OSX and CentOS. Drafted Security Policy and FInite State machine Documents, developed operational test code and algorithm test suite.
Japan Cryptographic Module Validation Program (JCMVP)
I was responsible for technical issues related to PGP SDK 3.12.0 achieving JCMVP validation #F0011. This process although similar to FIPS-140 was very detail oriented. PGP is the only non-Japanese company to achieve this validation.
Desktop Client and SDK Engineering
While primary responsibility is software development for PGP's cross platform cryptographic core library, I on occasion develop code for the OSX PGP Desktop client. Items I have been responsible for or contributed to include:
PGP SDK
- FIPS 140 Self Tests, Algorithm Validation and Operational tests.
- Cross platform secure file deletion.
- Cross platform Persistent passphrase caching (OSX Keychain)
- OSX Token support
- OSX intel 386 and x86_64 support
- Tar Cache (PGP Zip Archive editing)
- Export and Import of PGP sub-keys.
- Unix and OSX pgp-agent backend daemon
- OSX internationalization support
- Passphrase secure input
- MacBinary issues
- Support for http keyservers
- general bug fixes and API enhancements as needed.
- Algorithm Performance tests (cmdline --speed-test)
Desktop Client
- PGP Virtual Disk Client and kernel driver OSX development
- Network Kernel Engine (PGPnke) SMTP,POP, IMAP and AIM redirection
- pgpdisk command line utility
- PGPShredder (secure file deletion app)
- OSX Virtual Disk compatibility with PGP Portable,
- Duress Key for OSX Virtual Disk
- PKCS-11 module token support.
- Anonymized Recipient support.
- FIPS support in client.
- Key Reconstruction for both managed and unmanaged users
- X.509 Certificate import wizard.
- Service Menu support, (Finder Context Menu removed in OSX 10.6).
- Managed features: ADK policy, Disk engine prefs, master keys,
- PGP Archive processing
- Apple MobileMe Keychain Syncing
- PGP command line OSX issues.
- general bug fixes and enhancements as needed.
Architecture Papers
Using PGP to Secure Content to Groups.
This paper presents a simple method to secure content in a many-to-many relationship
that is compatible with the existing OpenPGP protocol. While this method is described
using the metaphor of email operations, it is also easily adapted to the social network
space and file sharing as well. As proof of concept, I have developed and checked in
a code library and server code that can easily be added to any PGP application.
Using PGP to Secure Content in the Clouds
This paper details some ideas/building blocks that enable an OpenPGP packet to describe,
encrypt and sign items that are stored separate from the packet itself. This has applications in
securing cloud storage, managed file transfer and social networking. As proof of concept,
I have developed and checked in a code library that will encrypt and upload content to
Amazon Simple Storage Service (AWS S3) using this method.
New Directions for Self-Destructing Data Systems
(Contributor to University of Washington USENIX paper)
This paper seeks to advance the state of the art in practical self-destructing data
systems that secure sensitive data from disclosure in our highly mobile, social-
networked, cloud-computing world. Our work facilitates the automatic, timed, and
simultaneous destruction of all copies of a self-destructing data object (such as a
message or file) without any explicit action by the user and without relying on
any single trusted third party.
Securing data in web applications with PGP
This paper discusses the various options for using PGP technology to extend the web client
with the goal of securing web data with and without the consent of the web site operator.
As proof of concept, I have developed and checked in a NPAPI web browser extension that
makes select SDK functions such as encrypt and decrypt available to the web developer
through a javascript toolbox . This plugin also can display decrypted PGP content in the web
browser.
Web Service Login using PGP Public keys
This interactive paper demonstrates an alternative to the password that employs PGP keys
to access a web-service. As proof of concept, I have developed and checked in a NPAPI
web browser extension that enables cryptographically strong user authentication and web
service login.
PGP Identity Management
This paper discusses ways to implement federated identity management using strong-cryptography
and the same PGP key infrastructure that is widely deployed on the Internet today.
Pretty Good Authentication
A discussion of the limitations of traditional user authentication and authorization methods to control
access of services over the Internet. Why passwords are risky; attacks and exploits. As an alternative,
how to use OpenPGP to create a lightweight but very secure authorization protocol to grant and transfer
user access privileges using authorization certificates signed with strong public key cryptography.
PGPticket - A Secure Authorization Protocol
A lightweight but very secure authorization protocol based on the SPKI and OpenPGP standards
is designed to control access of services over a public network. PGPticket grants and transfers
user access privileges through authorization certificates signed with strong public key cryptography.
Patent support
Duress Key for OSX Virtual Disk
Per request of Jon Callas, I implemented support for duress key feature for unmanaged users of OSX Virtual Disk.Given a virtual disk, in an emergency a user might wish to remove their ability to access the disk, but give a trusted third party agent that ability. In effect arecovery token for unmanaged users..
Brown bag presentations
2/17/2010 - Using PGP to Secure Content in the Clouds
12/18/2008- Securing Web Content
12/18/2008- Cloud Service Authentication
2/18/2009 - FIPS 140-2 and the PGPsdk
PGP Public Blog entries: Vinnie's Views
http://blog.pgp.com/index.php/category/vinnies_views/
- Data Security Is Not Just for the Big Guys
- Trust Us, It's Secure Encryption Technology
- Send Lawyers, Spies and Log Files
- Stimulating the Security of Medical Records.
- Securing Content in the Clouds.
- Some Thoughts About Facebook, OpenID and Secure Authentication
- PGPsdk and FIPS-140
- PGP Identity Management: Secure Authentication and Authorization over the Internet
Law Enforcement/ Intelligence Community
I am very concerned about the use of PGP and encryption technology by criminal and terrorist actors. In an effort
to assist and train law enforcement and also gather feedback about potential vulnerabilities and threats I have
made it a priority to represent PGP at the following venues. Most are invite only and require the participant to be
vetted by some form of background check.
Information Technology Study Group (ITSG) Workshop
Oct 2008,Apr 2009, Oct 2009, Apr 2010
The ITSG workshop is by "invitation only" and is intended for law enforcement organizations and members of the information/communications technology industry community.The purpose of the ITSG is to bring together key individuals from law enforcement and industry in a study group to examine the relationship and advancements in the area of information/communications technology, its impact on effective law enforcement, and the need for improvements in the area of technical investigative technology. The intent of the workshop is to establish a forum for ongoing discussions and information exchange between the information/communications technology industry and the law enforcement community.
Aug 2009- Cloud Security Alliance / NRO
Panel Member - Encryption & key mgt.
InfraGard
InfraGard is a partnership between the Federal Bureau of Investigation and the private sector. InfraGard is an association of businesses, academic institutions, state and local law enforcement agencies, and other participants dedicated to sharing information and intelligence to prevent hostile acts against the United States.
