New DoD encryption mandate

Ed Gerck edgerck at nma.com
Wed Aug 15 21:32:10 EDT 2007


The first is simply a MSFT Vista requirement for BitLocker file
encryption. The second is for example present in ACER laptops
(Aspire 5920) as eLock -- it allows you to protect and then
unlock storage devices that can be mounted as a file system when
plugged into the trusted system (the laptop), or keep them locked
otherwise.

> Also interesting is the requirement that all DOD computers include TPM (1.2
> or higher).  See next to last paragraph of the memorandum at
> http://iase.disa.mil/policy-guidance/dod-dar-tpm-decree07-03-07.pdf 

> According to http://www.fcw.com/article103467-08-13-07-Print the US
> Defense Department has mandated that all sensitive but unclassified
> information on mobile devices must be encrypted in compliance with FIPS
> 140-2.  "Mobile devices" include laptops, PDAs, CDs, flash drives, etc.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list