Jonathan Richards
Enter our Snapshots of Summer photography competition
Read Charles Bremner's Paris weblog
RIM, the BlackBerry maker, has dismissed French concerns that foreign agencies could intercept comunications sent via the portable-email device to spy on government business.
RIM’s defence of its devices came after reports that senior civil servants in France had been asked to stop using the devices because messages sent via BlackBerry pass through servers in the US and UK, and could, therefore, theoretically be intercepted.
The Canadian company said it would take as long to crack the encryption used by BlackBerry "as it would for the sun to burn out - billions of years," adding that the network had already been approved for use by NATO, as well as a number of governments, including the UK.
According to a report in Le Monde newspaper, French ministerial workers have been banned from using BlackBerrys because of fears held by the General Secretariat for National Defence (SGDN), which is responsible for national security in France.
Today RIM issued a strong defense of its network, claiming that the security it used - known as AES 256 protection - was "the strongest commercial cryptography available to any vendor in the world".
The security was "on a par" with that which protected workers when they connected to their corporate network from home, or which banks and websites used to secure online transactions, the company said.
"Every message that is sent via a BlackBerry is broken up into 2Kb 'packets of information', each of which is given a 256-bit key by the BlackBerry server," Scott Totzke, vice-president of global security at RIM, told Times Online. "That means to release the contents of a 10Kb e-mail, a person would have to crack 5 separate keys, and each one would take about as long as it would for the sun to burn out - billion of years."
Mr Totzke admitted that BlackBerry had yet to gain official approval for use by government employees in France, but that he hoped such approval would be granted next month.
Both UK and US authorities have already approved the devices for carrying non-restricted Government communications under two separate schemes known as CAPS and FIPS, which set out minimum security standards, he said.
Paul Cronin, who tests the security of corporate networks at Pentura, a security firm, said that while no network was 100 per cent secure, BlackBerry security was “on the whole very good, which is why so many banks use them”.
Mr Cronin said that a minor vulnerability had been demonstrated by a hacker last year, where by downloading a certain game, BlackBerry users made information available for outside view, but that as long as companies had appropriate policies in place for the devices’ use, there was no risk.
In a statement, RIM said it was “committed to working with and supporting the needs of both corporate and government customers within France, including protecting data from attack and unauthorised access”.
Alain Juillet, head of economic intelligence for the French government, was quoted in the Le Monde report as saying that there was a “real risk of interception” on the BlackBerry network.
Win a luxury weekend to Newcastle and its neighbour Gateshead, find out more here
Risk, resilience and embracing new technology
Industry sectors news at a glance. Interactive heatmap, video and podcast
Discover the collective power of smart thinking. Submit a solution and be in with a chance to win a Flip MinoHD Camcorder
The inside track on current trends in the charity, not for profit and social enterprise sectors
Everything the Business Traveller needs to know to make a better trip
Make the most of the summer and enter our fabulous photographic competition, you could win a £5000 holiday
Corsica is an island of beauty and contrast, an ideal holiday destination
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
The clever way to lease a new car is with Car leasing made simple™
2009
42,945
2008
71,450
Car Insurance
Not Specified
MI6
UK-based
£60,000
The Environment Agency
Bristol
Up to £90K
Boots
Midlands
OTE £85k
Credit Protection Association
Nationwide Opportunities
Completely London
Luxury Condo's in Manhattan with NYC views
The best new homes in Wimbledon?
Nationwide
Save up to £1,000 per couple with Elite Vacations at the five-star Constance Lemuria Resort
and do the British Isles this Summer.
Save up to 60% with Oxford Hotels and Inns
Try our inspiring luxury holidays to the Indian Subcontinent and South East Asia.
Great offers available
8 fabulous Canadian cities ...you won’t find cheaper
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Property Finder | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
Around 30 years ago long before mobile phones were around, the company I worked for had a modem with built in encryption for people with sensitive data. This wasn't designed for the military or the security services but was a cheap modem designed for businessmen. Before this product was allowed to be sold on the open market it had to be supplied to a government security agency to ensure they could break the encryption. In essence, very high levels of encryption were not allowed if it stopped their capability to intercept data traffic. It wasn't that long ago when a powerful encryption scheme available free on the net from Finland was outlawed in the US as the NSA, CIA or FBI couldn't crack it quickly enough. Normally all commercial encryption schemes are only allowed if a countries security services have a means of breaking that security. I can fully understand the French governments distrust of a North American encryption scheme that could be compromised by agencies in the USA.
Mike, Alicante, Spain
Laws like the US Patriot Act could make such messages vulnerable to intercept, if the government decides to monitor.
BB expert, waterloo, Canada
I think it's just a public service announcement that a country chock a block with burning cars and smug politicians doesn't provide a good environment for fledgling companies like RIM (which stands for Research In Motion).
Terry, Hawkesbury, Canada
Well, Blackberry actually uses end to end encryption. What this means is that there is a fully encrypted channel from the handset to the company's (or government's mail server). i.e. There is no plain text data that could be stored by these US/UK servers. If the application had not been architected this way it is highly unlikely that companies who have concerns about data privacy (such as banks) would have adopted this system.
Now the French Government's concerns are probably more likely to centre around any deal that could have been struck by RIM and US Gov agencies to intentionally weaken the encryption used. How likely or true this would be (i.e. paranoia versus healthy scepticism) is anyone's guess.
Rob, London,
RIM's comments about the communications being encrypted are likely sufficient to protect the messages in transit from being intercepted.
however, if the message exchange centers are located in the US or UK, one should be aware that those message exchange centers (where the message would be available as plain text) are subject to the laws of the country they are hosted in.
laws like the US Patriot Act could make such messages vulnerable to intercept, if the government decides to monitor.
Jim Mercer, Dubai, UAE
May be a bit of history may help - about 50 years ago, I served as a radio officer in the French merchant navy. At that time, messages were sent mostly uncoded, but coded messages were also admitted.
But the companies using codes had to deposit a copy of these codes with the French administration.
One may therefore imagine that there is a similar law (may be secret) in the United States and/or Canada. Should this be the case, RIM would have to release all necessary coding information to the relevant state agencies, which would then be able (if deemed necessary) to decode the information passed through the British and American servers.
As a French saying goes : "There is no smoke without a fire" (Il n'y a pas de fumée sans feu).
Strohl, Colmar, France
Anyone who has read about US electronic intelligence gathering capabilities should be under no illusion that any electronic communication is secure. Now whether they can interpret that intelligence is another question all together.
Jock, Boston, USA