Printable Version Addonics hardware encryption security analysis    eNova X-Wall 128-bit TDES

Bullet Proof security

The Addonics hardware encryption implementation offers practically bullet proof security in comparing to software encryption implementation

Software encryption

It is well documented that a modern computer may break software-based DES 40-bit encryption in a few days or in a few hours if you can somehow manage to increase your computing power. To break software based DES 64-bit encryption, the scale of computing power you must gather with will dramatically exceed your imagination. There are only specialized organizations capable of managing supercomputers or thousands of personal computers running in parallel that can discern the secrecy. Depending on the level of actual investment, a few months or even years are normally expected. Having stated that, breaking software DES 40/64-bit requires special skills and expertise. It isn't something that regular Joe Smith can do efficiently.

Hardware encryption

It is extremely hard to break hardware-based full disk encryption. The technique deployed to break software-based encryption cannot be practically deployed to break hardware-based encryption implemented in the Saturn Cipher and Jupiter Cipher design.

A hardware-based full disk encryption solution such as Saturn Cipher or Jupiter Cipher encrypts everything on the hard drive including boot sector, OS, temp./swap files. There isn't any clear text left on the hard drive for trace, thus eliminates entirely the possibility of analyzing useful patterns. Thus, traditional wisdom and techniques of breaking software-based DES 40/64-bit is no longer applicable as no OS information is available therefore no software application can be executed, which greatly deters the process of key breaking as every wrong attempt will require a new power on reset process of the hardware or reconnection of the Saturn Cipher or Jupiter Cipher drive.

So what’s so important about the power on reset and how does it deter the key breaking process?

The Saturn Cipher or Jupiter Cipher hardware-based full disk encryption solution at DES 40-bit strength offers a possible combination of 1,099,511,627,776 keys. The actual key will normally be yielded when the 50% of the key domain is eliminated. A typical power on reset process lasts 0.4 second or more. The following simple calculation displays time required in order to run through the 50% of the 40-bit possible key domain:

1,099,511,627,776 x 50% x 0.4 seconds = 219,902,325,555 seconds = 3,665,038,759 minutes = 61,083,979 hours = 2,545,165 days = 6,973 years

By increasing from DES 40 to DES 64-bit encryption, the possible combination keys increase dramatically to 72,057,594,037,927,936. When combined with the minimum 0.4 sec hardware reset, the time required in order to run through the 50% of the 64-bit possible key domain jumps up to 456,982,528 years!

Or, a trained code breaker maybe able to directly connect to the Saturn Cipher hardware-based full disk encryption hardware circuit interface then attempt to intercept a complete data transfer for deciphering, assuming known exact position of both clear text and cipher text. Even if a potential hacker who has the clear text and its corresponding cipher text, attempts to derive the cryptographic key would still consume years as DES/TDES are known for resisting “Known Answer Test.” A 40-bit hardware-based full disk encryption solution specifically under the known answer attack is somewhat weak but 64-bit solution will be a totally different scale.

Basing on the above analysis, we feel confident that the Saturn Cipher or Jupiter 64-bit products are more than adequate for most applications. We do realize, however, there are rigid security requirements that can not stand a chance from being compromised. In that case, we shall recommend using the 128-bit versions.