Strong encryption methods and secure server locations in Russia are the key tools we use to ensure privacy and trust to our customers.
Comrade Encrypted Mobile applies PGP to all email communications between two devices.
What is PGP?
PGP is a proven and secure encryption method that allows users a high encryption standard in their hands at e-mail accounts of the Blackberry via BES servers. It is a very user friendly system, and you can communicate with all other PGP Blackberry companies that have applied to other domains. The standard encryption we use, our PGP platform is RSA 4096 bits with AES 256. True end to end encryption. PGP has no back doors, and this was proven by distributing the source code publicly. Not many encryption apps or software will provide source code publicly for fear of exposing weaknesses or back doors.
PGP for BlackBerry uses a modified public key system to encrypt email messages. Every BlackBerry user has a private encryption key known only by them (and not known by Comrade), and a public encryption key that other people need to know in order to communicate with them.
The public and private keys work together, as follows:
The sender composes an email message and hits Send.
The message is compressed.
PGP creates a random, one-time Session Key that’s used to encrypt the compressed email message on the sender’s BlackBerry. This Session Key will also be required to decrypt the message.
The Session Key is then encrypted using the recipient’s public key, which is specifically tied to the recipient’s BlackBerry. Decryption can only be done using a private key held by the recipient, on that device.
The encrypted email and encrypted Session Key are both sent to the recipient. If the message happens to be intercepted at this point, it will be meaningless because both the email and Session Key are encrypted and can only be decrypted with the recipient’s private key.
Receives the email.
PGP automatically decrypts the Session Key with the recipient’s private key. Note that only the recipient knows their own private key, and Comrade Encrypted Mobile does not know any clients’ private keys. This key is tied to a single device (e.g. BlackBerry), so no other person or device is able to decrypt the Session Key.
PGP uses the Session Key to decrypt the compressed email message.