Windows Mobile 6 encryption fix is pitched - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Software

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

Microsoft sniffing around Facebook? Google's Paris street photos may spark lawsuits. Listen now!

Network World 360

Tech vendors are like high school. Listen now!

Network World's Twisted Pair

Additional Resources

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

Reduce the Complexity and Cost of Windows Server Consolidation in Six Modules Novell

Watch this webcast to learn in six modules how to more cost effectively consolidate your Windows servers with virtualization. This unique program allows you to pick and choose which of the six modules you would like to view or watch the entire webcast at once. Topics covered: Performance, Use Cases, Enterprise-level Support, Managing Windows Workloads, Setup and Configuration and The Future. Find out how you can simplify server consolidation within your organization today. Register below to learn more and be entered to win an Archos 605 Portable Media Player.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

You can find related project managemen articles in - Anonymous

Join the Discussion

Partner Content
CA logo

CA Network & Voice Resource Center

Comprehensive Network & Voice Management Visit CA Network & Voice Management Resource Center and get insights into industry best practices, information that helps you to address your challenges.

CA Network & Voice Management Resource Center

whitepaper

Managing Voice Over IP for Successful Convergence

Voice over IP (VoIP) has much to offer in cost savings but some customers have concerns about VoIP call quality compared to the quality of traditional voice services. This white paper will help you learn how to take the right steps so that voice quality is assured.

Managing VoIP for Successful Convergence

whitepaper

The Changing Face of Network Management

Managing your network is serious business. This paper discusses the benefits of integrating configuration change-awareness into your network fault management solution

Download Whitepaper

Windows Mobile 6 encryption fix is pitched

Microsoft technology flaw involves encrypting memory cards for smartphones
By John Cox , Network World , 04/13/2007
  • Social Web 
  • Email 
  • Feedback 
  • Close

A European company has released software that corrects a possible weakness in the way Windows Mobile 6 encrypts memory cards plugged into smartphones.

Without the software, data encrypted by Windows Mobile 6 on an SDcard can become unreadable. That’s because the Microsoft software stores the encryption keys in the phone’s internal flash memory and doesn’t keep a copy of them.

If a user has to do a hard reset, which deletes all records and entries on the device and restores factory default settings, the encryption keys are lost. Data on the card, encrypted by those keys, can’t be unscrambled.

Aiko Solutions has just released Version 1.1 of its SecuBox for Pocket PC, an encryption program for Windows-based handhelds. The new version specifically creates an encryption key backup feature. The backup can be stored on the user’s PC or on any other storage media, according to the vendor, which is located in the Republic of Moldova.

For security purposes, the key backup can itself be encrypted and password-protected.

Microsoft introduced the media card encryption feature, and the ability to wipe the data remotely, when it unveiled Windows Mobile 6 earlier this year. Microsoft developers blogged about the new capability, which uses the powerful AES 128 encryption algorithm. Encryption is enabled by simply selecting a checkbox. The operating system encrypts the data on the card and places a key in the device’s internal flash memory.

But a blog entry also noted that this step now ties the storage card to that specific device. “The encryption is tied to a unique ID created upon Hard Reset of the device. You cannot move the encrypted card to another device without first decrypting the card.”

A subsequent FAQ, by another Microsoft developer, acknowledged “If the device is reset and internal flash is cleared, the decryption keys are lost. If the keys were preserved, it would be easy to access the storage card of a stolen device by just cold booting the stolen device and clearing its storage, then re-inserting the stolen card.”

1 | 2 |  Next >
Comments (2)
Login
Forgot your account info?

Where's the problem?!By Anonymous on August 31, 2007, 5:40 amWho cares - it's a mobile handset! The data on the card is nearly always an end-users personal photo's, music and other guff. Any business related files are on...

Reply | Read entire comment

Windows Mobile 6 encryption fix is pitchedBy Microsoft Subnet on April 13, 2007, 6:33 pmA European company has released software that corrects a possible weakness in the way Windows Mobile 6 encrypts memory cards plugged into smartphones. Without the...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code