Voice Encryption Firm Offers $250K In Gold To Hack Its Technology

An Israeli mobile security firm that a month ago offered $100,000 in gold to anyone who could hack its voice encryption technology has upped the ante to $250,000. Gold Lock posted a sample of an encrypted voice conversation on its Website and is offering the golden reward to any hackers who can crack it and send the company a transcript of the call.

Gold Lock, which sells military-grade mobile devices and data and voice encryption tools, says the voice call file has been downloaded more than 1,000 times in the Gold Lock Hacker Challenge contest. But that’s nowhere near the number the vendor had expected, so it decided to make the contest more attractive with a bigger bounty.

“Since 2003, we have been telling everyone how our products provide unbreakable protection for their voice and data transmissions, but talk is cheap. So now we are putting our claims to the ultimate test by inviting anyone that thinks they have the skills to take us down,” said Noam Copel, CEO of Gold Lock, in a statement.

Link

Product Watch: Voice Encryption Firm Offers $250K In Gold To Hack Its Technology

By Kelly Jackson Higgins DarkReading Dec 07, 2009
An Israeli mobile security firm that a month ago offered $100,000 in gold to anyone who could hack its voice encryption technology has upped the ante to $250,000. Gold Lock posted a sample of an encrypted voice conversation on its Website and is offering the golden reward to any hackers who can crack it and send the company a transcript of the call.
Gold Lock, which sells military-grade mobile devices and data and voice encryption tools, says the voice call file has been downloaded more than 1,000 times in the Gold Lock Hacker Challenge contest. But that’s nowhere near the number the vendor had expected, so it decided to make the contest more attractive with a bigger bounty.
“Since 2003, we have been telling everyone how our products provide unbreakable protection for their voice and data transmissions, but talk is cheap. So now we are putting our claims to the ultimate test by inviting anyone that thinks they have the skills to take us down,” said Noam Copel, CEO of Gold Lock, in a statement.
Copel says he doesn’t expect to have to give away the gold, however. “I don’t think there is a chance at all that I’ll be giving away the gold. No individual, group or intelligence agency has the skills, technology or time needed to defeat our technology,” he said.
[...]

Link

LayerOne 2008 – David Hulton – Intercepting Mobile Phone/GSM

Open Source Effort to Hack GSM

If you’re still using a cellphone based on early digital standards, you better be careful what you say. The encryption technology used to prevent eavesdropping in GSM (Global System for Mobile communications), the world’s most widely used cellphone system, has more security holes than Swiss cheese, according to an expert who plans to poke a big hole of his own.

Karsten Nohl, chief research scientist with H4RDW4RE, a Sunnyvale, Calif.-based security research firm, is mounting what could be the most ambitious attempt yet to compromise the GSM phone system, which is used by over 3 billion people around the world. Others have cracked the A5/1 encryption technology used in GSM before, but their results have remained secret. However, Nohl, who earned a Ph.D. in computer science at the University of Virginia and is a member of Germany’s Chaos Computer Club (CCC), intends to go one big step further: By the end of the year, he plans to make the keys available to everyone on the Internet.

…

Link

Smartphone security software market shows strong potential for channel

…

Smartphone security business challenge and channel opportunity

Sales and support opportunities for encryption are likely to grow as smartphones use more business applications, such as SAP, and store more corporate data. As discussed earlier, the potential for antimalware sales and support is enormous when smartphones finally become subject to widespread attack.

While encryption vendors offer mobile-specific products on their own, they are also included as part of their overall corporate endpoint encryption suites. Check Point’s Svegby said PC encryption orders for, say 5,000 seats, often come with an additional 150 to 200 licenses for smartphone encryption.

Some vendors, such as Credant Technologies Inc. and Check Point offer only encryption products, others such as F-Secure Corp. and Kaspersky Lab Inc. offer only antimalware, and still others, such as Symantec and McAfee Inc., offer both encryption and antimalware. In terms of operating systems, most vendors support Windows Mobile and Symbian, and some support Palm OS and Blackberry as well. There have been reports that several vendors are working on iPhone antimalware, as well.

…

Link

Gold Lock Intercept Video (English)

 

Gold Lock Enterprise VS Skype

Skype uses SSL which uses electronic certificates and 128 bit encryption (standard for credit card transactions online also) This level of encryption is NOT appropriate for even top secret level communications. How many times have credit card numbers been stolen online?

http://en.wikipedia.org/wiki/Transport_Layer_Security

128-bit 2^128 2 multiplied by 2 128 times over. = 339,000,000,000,000,000,000,000,000,000,000,000 (give or take a couple trillion…).

Gold Lock Enterprise uses 4 different encryption methods. One of which is 16,384 Bit Authentication. That is 2 multiplied by 2, 16,384 times over (not just 128 times). This method IS appropriate for top secret level communications. Enterprise uses 16,384 Bit Authentication Elliptic Curve 384 Bits (RSA 7680 Bits Equivalent) AES 256 Bits Diffie Hellman 4096 Bits

AES – http://en.wikipedia.org/wiki/Advanced_Encryption_Standard Top Secret appropriate

RSA – http://en.wikipedia.org/wiki/RSA Top Secret appropriate

Diffie Hellman – http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange Top Secret appropriate

In addition to this technical “stuff” the facts remain that Skype provides a key to governments for lawful interception (which means all the security in the world in now a mute point) and  Skypes 128 bit encryption has been broken, and hackers now easily intercept their calls.

http://sigillu.wordpress.com/category/technologies/skype/

As you can see Enterprise has significantly higher encryption capabilities than Skype. Skype encrypts just enough to satisfy their customers. Gold Lock takes pride in having the best and highest encryption software on the market. Gold Lock Enterprise is a military grade encryption software. No military uses Skype to relay orders or pass top secret information.

Gold Lock protects your communications

Gold Lock keeps your communications safe

Gold Lock Enterprise is the preferred solution for thousands of users around the world Licensed by the  Israeli Ministry of Defense, Gold Lock Enterprise is a world-class software-based solution providing military-grade encryption for voice and data communication. Gold Lock’s triple layered security scheme turns your PC/Laptop, Nokia Phone or Windows Mobile devite into a military grade encrypted communicator, protected against any interception attempt by private, governmental or military entities. Gold Lock Enterprise encrypts your calls, file transfer and text all over the world, including international calls. No VOiP provider is needed, the systems works on all types of internet connections (for example: 3G, EDGE, GPRS, WIFI…) Gold Lock Enterprise is easy to use, all key management is auto managed without any need for complicated user defined keys. Gold Lock Enterprise now supporting iPhone We have great news! Gold Lock is proud to announce that our flagship voice and data encryption software is now compatible with iPhone. We are the first, once again, to bring you the best solution on the market.  Now you can protect your communications on your Nokia Phone, Windows Mobile, iPhone or Blackberry, keeping conversations secure. The iPhone encryption system is completely compatible with all other Gold Lock Enterprise devices – Nokia, Windows Mobile, and PC (Windows XP/Vista. Gold Lock Enterprise available for Blackberry One of our main goals lately has been to release a Blackberry compatible version. Gold Lock Enterprise is now compatible with Blackberry, making it the most suitable and s ecure encryption tool, working on multiple platforms. Gold Lock Enterprise is now able to encrypt your calls, file transfer and text internationally with your favorite device. Sigillu is the authorized representative of Gold Lock in America. We are looking to partner with companies possessing a deep understanding of customer needs and the ability to faithfully represent the values of uncompromised security and trust for governments, corporations and individuals using Gold Lock encryption systems. If you are interested, contact Doug Haskins at doug@gold-lock.com

Gold Lock Enterprise, through Sigillu www.sigillu.com email: doug@gold-lock.com Tel: 954.892.5868

Demos to show spying on mobile IP calls

This screen shot shows the user interface of UCSniff. The user can listen in on a conversation and see the video of two people talking on an IP-based video phone. The two video screens show what each of the video phones is displaying.

(Credit: Viper Lab, Sipera Systems)

<link>

Hotspot sniffer eavesdrops on iPhone in real-time

…

“As the private call is in progress, we can see and hear what is happening,” said Jason Ostrom, a developer of UCSniff and director of Viper Labs, the research arm of security firm Sipera Systems. “There’s real-time violation of confidentiality.”

In addition to monitoring voice conversations as they happen, UCSniff can also bug video conferences in real time. Ostrom said he and fellow Viper Labs researcher Arjun Sambamoorthy plan to show those capabilities at Toorcon as well.

With the proliferation of iPhones and other smartphones, plenty of businesses and individuals have sought to save money on roaming charges by routing calls over the internet instead of over carrier networks. Adam Boone, a vice president at Sipera, said one large, unnamed client logs more than 1 million minutes per month in such VoIP calls.

The problem, he added, is that many of the iPhone apps for VoIP calls don’t provide encryption capabilities, making the conversations ripe for eavesdropping. (Sipera plans to unveil a new product to protect such users next week).

…

<link>