Blackberry ENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES Podręcznik Użytkownika Pobierz pdf (Strona 126)

Limitations of RIM Cryptographic API support for cipher suites for the key

establishment algorithm

The RIM® Cryptographic API implementation of the TLS protocol and WTLS protocol supports the use of the RSA® public key

algorithm, DSA public key algorithm, and Diffie-Hellman key exchange algorithm, with the following limitations.

Cipher suite type Typical component limitation

export

• RSA and Diffie-Hellman: 1024 bytes or less

• elliptic curve: 163 bytes or less

non-export

• non elliptic curve operations: 4096 bytes

• elliptic curve operations: 571 bytes

Limitations to non-export cipher suite types are due to the computational constraints of a BlackBerry® device.

Security Technical Overview

Limitations of RIM Cryptographic API support for cipher suites for the key establishment algorithm

124

1 2 ... 121 122 123 124 125 126 127 128 129 130 131 ... 143 144

Brak uwag

Blackberry ENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES Podręcznik Użytkownika Strona 126