21 August 2008

Cellcrypt begins rigorous FIPS certification process

LONDON - British VoIP security specialist, Cellcrypt, has announced it has begun the rigorous process of Federal Information Processing Standards (FIPS) 140-2 to obtain Level 1 certification in the United States.

The FIPS 140-2 government computer security standard certification allows private sector cryptographic vendors such as Cellcrypt to have their products registered for use in US government departments and regulated industries.

The company plans to certify its Crypto Core library, which is the basis of products including Cellcrypt Communicator, a voice security system that encrypts Voice-over-IP calls.

Cellcrypt has selected network security auditing expert, CygnaCom, to assist in the process and test its encryption module for FIPS compliance. CygnaCom is accredited by the National Voluntary Laboratory Accreditation Program (NVLAP).

“We looked at several companies that were fast and reliable, but we wanted to work with a dynamic company,” said Rodolfo Rosini, Cellcrypt’s founder and VP of business development. “The testing process will review the source code and look deep into the encryption program.”

Cellcrypt expects to have the FIPS certification process completed during the first quarter of next year.

At the same time, it is enabling its entire line of products with ‘Suite B’ cryptography, making Cellcrypt Communicator Mobile the first VoIP client for cellular phones on the market with the Suite B security module.

Suite B, which uses the highly efficient Elliptic Curve Cryptography (ECC) algorithm, will be installed in Cellcrypt’s Crypto Core library by the end of August and will be released commercially during the fourth quarter of 2008.

The Suite B security module is approved for use throughout US government. It employs cryptographic algorithms specified by the National Security Agency (NSA) to protect both classified and unclassified national security systems and information. Suite B includes cryptography for digital signatures, hashing and key exchange.