"Not All Encryption Is Created Equal"

E2EE was proposed as an additional layer of encryption for the Global System for Mobile Communication and Terrestrial Trunked Radio mobile communications standards when the need and value of private and secure communications came of age. Nearly all consumer-oriented information-sharing services provide data encryption today, but not all are E2EE, and there is still confusion regarding what true E2EE entails. E2EE is a secure communication method that encrypts data at the sender's device and decrypts it only at the recipient's device, preventing anyone in between from reading or modifying the data. True E2EE offers a very high level of security because it prevents unauthorized parties from intercepting communications. In addition, unlike simpler encryption techniques, E2EE can provide mathematical proof of security through public/private key cryptography, algorithms that factor large prime numbers, and digital signatures that guarantee the sender's authenticity. This definition articulates the security functions and requirements necessary for government agencies to deploy E2EE services securely. True E2EE services are robust and fortified to help organizations meet the complex and stringent security and privacy requirements that most enterprises require. They enable agencies to minimize risk and maximize compliance, while providing the ability to communicate quickly and securely. Adopting best practices allows organizations in the public and private sectors to integrate E2EE successfully into their communications and file-sharing platforms. This article continues to discuss key attributes of secure communications that enterprises should consider when designing their E2EE models.

GCN reports "Not All Encryption Is Created Equal"

Submitted by Anonymous on