New DoD encryption mandate

[Charles Jackson]

Also interesting is the requirement that all DOD computers include TPM (1.2
or higher).  See next to last paragraph of the memorandum at
http://iase.disa.mil/policy-guidance/dod-dar-tpm-decree07-03-07.pdf 

This memo was pointed to by the story referenced below.

Chuck Jackson



-----Original Message-----
From: owner-cryptography at metzdowd.com
[mailto:owner-cryptography at metzdowd.com] On Behalf Of Steven M. Bellovin
Sent: Wednesday, August 15, 2007 9:25 AM
To: cryptography at metzdowd.com
Subject: New DoD encryption mandate

According to http://www.fcw.com/article103467-08-13-07-Print the US
Defense Department has mandated that all sensitive but unclassified
information on mobile devices must be encrypted in compliance with FIPS
140-2.  "Mobile devices" include laptops, PDAs, CDs, flash drives, etc.

		--Steve Bellovin, http://www.cs.columbia.edu/~smb

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com