Blackbe;rry ENTERPRISE SOLUTION SECURITY - ENTERPRISE SOLUTION - SECURITY... Installation guide

BlackBerry Enterprise Solution
Security Technical Overview
for BlackBerry Enterprise Server Version 4.1 Service Pack 6 and BlackBerry
Device Software Version 4.6
©2009 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution
Contents
Wireless security.......................................................................................................................................................6
BlackBerry Enterprise Solution security ...............................................................................................................6
BlackBerry Enterprise Solution security features........................................................................................... 7
New security features.......................................................................................................................................... 8
BlackBerry encryption keys ....................................................................................................................................9
Master encryption keys.......................................................................................................................................9
Message keys.......................................................................................................................................................12
Content protection keys.....................................................................................................................................13
Grand master keys ..............................................................................................................................................15
BlackBerry symmetric key encryption algorithms .............................................................................................15
Standard BlackBerry message encryption......................................................................................................17
Permitting third-party applications to encode BlackBerry device data ........................................................18
BlackBerry wireless messaging security..............................................................................................................18
Receiving an email message on the BlackBerry device................................................................................18
Sending an email message from the BlackBerry device .............................................................................19
Message attachment viewing security features ........................................................................................... 19
PIN-to-PIN messaging......................................................................................................................................20
Text messaging....................................................................................................................................................21
Controlling unsecured messaging ...................................................................................................................21
Extending BlackBerry device messaging security ............................................................................................ 22
PGP Support Package for BlackBerry devices .............................................................................................. 22
PGP encryption................................................................................................................................................... 23
S/MIME Support Package for BlackBerry devices .......................................................................................24
S/MIME encryption............................................................................................................................................25
Decrypting and reading messages on the BlackBerry device using Lotus Notes API 7.0.....................26
Protecting stored data...........................................................................................................................................28
Protecting stored messages on the messaging server ................................................................................28
IT policy signing and storage on the BlackBerry device..............................................................................28
Application password encryption and storage on the BlackBerry device................................................28
Protected storage of external memory on the BlackBerry device .............................................................29
Protected storage of user data on a locked BlackBerry device..................................................................30
Protected storage of master encryption keys on a locked BlackBerry device..........................................31
Protected storage of master encryption keys on a BlackBerry device during a reset.............................31
Clearing the BlackBerry device memory........................................................................................................ 32
©2009 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution
BlackBerry architecture component security .................................................................................................... 33
BlackBerry Infrastructure .................................................................................................................................34
BlackBerry Enterprise Server ...........................................................................................................................34
Messaging server ...............................................................................................................................................34
BlackBerry Configuration Database ...............................................................................................................34
Protecting the BlackBerry Enterprise Solution connections...........................................................................36
SRP authentication ............................................................................................................................................ 37
How the BlackBerry Enterprise Server and the BlackBerry Infrastructure handle undeliverable
messages .............................................................................................................................................................38
BlackBerry Router protocol authentication...................................................................................................38
Authentication during wireless enterprise activation .................................................................................39
TCP/IP connection..............................................................................................................................................41
Messaging server to computer email application connection ....................................................................41
Connections between the BlackBerry Desktop Manager and its components .......................................42
BlackBerry MDS connections...........................................................................................................................43
Using two-factor authentication to protect connections to enterprise Wi-Fi networks........................44
How the BlackBerry Enterprise Solution authenticates requests for wireless software upgrades......45
WAP gateway connections ...............................................................................................................................45
Instant messaging server connections...........................................................................................................45
Using segmented network architecture to prevent the spread of malware on your organization’s
network ................................................................................................................................................................46
Protecting Wi-Fi connections to the BlackBerry Enterprise Solution............................................................46
Enterprise Wi-Fi network solution architecture security features.............................................................47
Accessing the BlackBerry Infrastructure .......................................................................................................47
Supported security features of Wi-Fi enabled BlackBerry devices............................................................47
IEEE 802.1X environment components...........................................................................................................48
How the IEEE 802.1x environment controls access to the enterprise Wi-Fi network............................ 49
Administering enterprise Wi-Fi network solution security using IT policy rules.................................... 49
Requiring protected connections to enterprise Wi-Fi networks ............................................................... 49
Using VPNs to protect connections to enterprise Wi-Fi networks.............................................................51
Using enterprise captive portals to protect connections to enterprise Wi-Fi networks or Wi-Fi
hotspots ...............................................................................................................................................................52
Authenticating a BlackBerry device user ...........................................................................................................52
Authenticating a user to a BlackBerry device using a password...............................................................52
Authenticating a BlackBerry device user using a smart card.....................................................................52
Controlling BlackBerry devices............................................................................................................................54
Controlling BlackBerry device behavior using IT policy rules ....................................................................54
©2009 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution
Enforcing BlackBerry device and BlackBerry Desktop Software security................................................55
Controlling BlackBerry device access to the BlackBerry Enterprise Server.............................................55
Controlling wireless software upgrades using the BlackBerry Enterprise Server...................................56
Protecting Bluetooth connections on BlackBerry devices ..........................................................................56
Controlling location-based services on the BlackBerry device.................................................................. 57
How the BlackBerry device protects its operating system and the BlackBerry Device Software........58
Protecting the BlackBerry device against malware .....................................................................................58
Protecting lost, stolen, or replaced BlackBerry devices................................................................................... 61
Remotely resetting the password of a content protected BlackBerry device.......................................... 61
Types of remote BlackBerry device wipes......................................................................................................62
Remotely erasing data from BlackBerry device memory and making the BlackBerry device
unavailable ..........................................................................................................................................................63
Remotely resetting a BlackBerry device to factory default settings .........................................................64
Erasing data from BlackBerry device memory and making the BlackBerry device unavailable
(standard security wipe) ...................................................................................................................................64
Unbinding the smart card from the BlackBerry device ...............................................................................65
Related resources.................................................................................................................................................. 66
Appendix A: RIM Crypto API Interface .............................................................................................................. 69
Cryptographic functionality that the RIM Crypto API provides................................................................ 69
Appendix B: TLS and WTLS standards that the RIM Crypto API supports.................................................... 72
Key establishment algorithm cipher suites that the RIM Crypto API supports ...................................... 72
Symmetric algorithms that the RIM Crypto API supports...........................................................................73
Hash algorithms that the RIM Crypto API supports .................................................................................... 73
Appendix C: Previous version of wired master encryption key generation..................................................74
Previous version of wired master encryption key generation process......................................................74
Appendix D: BlackBerry device wipe process.................................................................................................... 75
Memory scrub process for RAM on BlackBerry devices...............................................................................75
Memory scrub process for flash memory on BlackBerry devices...............................................................76
Memory scrub process for flash memory that stores user-saved files on BlackBerry devices .............76
Appendix E: Process for deriving encryption keys that protect the keys used with content protection. 77
Appendix F: Power and electromagnetic side-channel attacks and countermeasures ............................. 78
Masking operation process that the AES implementation uses when content protection is turned on78
Masking operation process that the AES implementation uses when content protection is turned off78
Appendix G: BlackBerry Router protocol ...........................................................................................................80
How the BlackBerry Router protocol uses the Schnorr identification scheme .......................................80
Examples of attacks that the BlackBerry Router protocol is designed to prevent..................................80
Process flow: Using the BlackBerry Router protocol to open an authenticated connection.................81
©2009 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution
Process flow: Using the BlackBerry Router protocol to close an authenticated connection................82
Appendix H: Enterprise Wi-Fi security methods that the BlackBerry device supports ..............................83
EAP authentication methods that the BlackBerry device supports...........................................................83
Encryption algorithms that the BlackBerry device supports for use with layer 2 security methods ...84
EAP authentication methods and encryption algorithms with which the BlackBerry device supports
the use of CCKM.................................................................................................................................................85
VPN solution on the Wi-Fi enabled BlackBerry device................................................................................86
Appendix I: Algorithm suites that the BlackBerry device supports for negotiating SSL connections.....86
Appendix J: RSA SecurID software token tokencode generation process....................................................88
Appendix K: Process for content protection initialization ..............................................................................88
Appendix L: Protocol for resetting the password on a content-protected BlackBerry device remotely .89
Cryptosystem parameters.................................................................................................................................89
Protocol process ................................................................................................................................................ 90
©2009 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution 6
This document describes the security features of the BlackBerry® Enterprise Solution and provides an overview
of the BlackBerry security architecture.
This document describes the security features that the BlackBerry® Enterprise Server Version 4.1 SP6,
BlackBerry® Desktop Software Version 4.6, and BlackBerry® Device Software Version 4.6 support, unless
otherwise stated. To determine if a feature is supported in an earlier software version, see the documentation for
earlier versions of the BlackBerry Enterprise Server, the BlackBerry Desktop Software, and the BlackBerry Device
Software.
For the full terms substituted by the acronyms in this document, see the BlackBerry Enterprise Solution Security
Acronym Glossary.
Wireless security
Many enterprise organizations realize significant return on investments and productivity gains by extending
access to their enterprise information to mobile employees. With an increased demand for mobile content and
the threat of information theft, organizations have concerns about addressing security needs and requirements
when evaluating wireless solutions. Without an effective security model, your organization might expose
sensitive data, with financial and legal implications.
Powerful personal devices such as mobile phones and personal digital assistants can access and store sensitive
data. Controlling access to these devices is an important issue. Leaving devices with remote access to sensitive
data accessible to potentially malicious users might be dangerous.
The BlackBerry Enterprise Solution (consisting of a BlackBerry device, BlackBerry Device Software, BlackBerry
Desktop Software, and the BlackBerry Enterprise Server) is designed to protect your organization from data loss
or alteration in the event of
•malicious interception of data on your organization’s network, while a BlackBerry device user is sending and
receiving messages and accessing your organization’s data over the wireless network using the BlackBerry
device
•an attack intended to steal your organization’s data, using malicious application code (for example, a virus)
•theft of the BlackBerry device
BlackBerry Enterprise Solution security
The BlackBerry Enterprise Solution implementation of symmetric key cryptography is designed to provide
confidentiality, integrity, and authenticity implicitly.
Concept Description BlackBerry Enterprise Solution implementation
confidentiality permits only the intended
message recipient to view
the contents of a message
Use encryption, which is data scrambling based on a secret
key, to make sure that only the intended recipient can view
the contents of the message.
integrity enables a message
recipient to detect if a third
party altered the message
data in transit between the
message sender and the
message recipient
•Protect each message that the BlackBerry device sends
with one or more message keys comprised of random
information, which is designed to prevent third-party
decryption or alteration of the message data.
•Enable only the BlackBerry Enterprise Server and the
BlackBerry device to know the value of the master
encryption key, recognize the format of the decrypted
and decompressed message, and automatically reject a
message either one receives that is encrypted with the
wrong master encryption key and therefore does not
produce the required message format upon decryption.
www.blackberry.com

BlackBerry Enterprise Solution 7
Concept Description BlackBerry Enterprise Solution implementation
authenticity enables the message
recipient to identify and
trust the identity of the
message sender
Require that the BlackBerry device authenticate itself to the
BlackBerry Enterprise Server to prove that it knows the
master encryption key before the BlackBerry Enterprise
Server can send data to the BlackBerry device.
The BlackBerry Enterprise Solution is designed so that data remains encrypted (in other words, it is not
decrypted) at all points between the BlackBerry device and the BlackBerry Enterprise Server. Only the
BlackBerry Enterprise Server and the BlackBerry device can access the data that they send between them. Thus,
third-parties, including service providers, cannot access potentially sensitive organization information in a
decrypted format.
If the BlackBerry device cannot recognize the message format that the BlackBerry Enterprise Server decryption
process produces, it does not receive the message; if the BlackBerry Enterprise Server receives a message
encrypted with the wrong master encryption key, it does not send the message to the BlackBerry device. If
message failure occurs, the BlackBerry device prompts the BlackBerry device user to generate a new master
encryption key.
BlackBerry Enterprise Solution security features
Feature Description
protect data •Encrypt data traffic in transit between the BlackBerry
Enterprise Server and the BlackBerry device.
•Encrypt data traffic in transit between your organization’s
messaging and collaboration server and a BlackBerry device
user’s computer email application.
•Use secure protocols to connect the BlackBerry Enterprise
Server to the BlackBerry Infrastructure.
•Encrypt data on the BlackBerry device.
•Encrypt data in the BlackBerry Configuration Database.
•Authenticate a BlackBerry device user to the BlackBerry
device using a smart card with a password or passphrase.
•Verify the authenticity and integrity of the BlackBerry
device operating system and BlackBerry Device Software
automatically.
protect encryption keys •Encrypt encryption keys on the BlackBerry device.
control BlackBerry device connections •Control which BlackBerry devices can connect to the
BlackBerry Enterprise Server.
•Control Bluetooth® connections to and from the BlackBerry
device.
•Control BlackBerry Smart Card Reader connections.
•Control Wi-Fi® enabled BlackBerry device connections to
enterprise Wi-Fi networks.
www.blackberry.com

BlackBerry Enterprise Solution 8
Feature Description
control BlackBerry device and BlackBerry
Desktop Software functionality
•Send wireless commands to turn on and turn off BlackBerry
device functionality, delete information from BlackBerry
devices, and lock BlackBerry devices.
•Send IT policies to BlackBerry devices to customize security
settings for BlackBerry device users or groups of BlackBerry
device users on a BlackBerry Enterprise Server.
•Send application control policies to BlackBerry devices to
control third-party application availability and connections.
•Enforce BlackBerry device and BlackBerry Smart Card
Reader passwords.
New security features
Feature Software versions supported Description
Allowing the S/MIME
Support Package for
BlackBerry devices to use
password-based encryption
when sending an S/MIME-
protected email or PIN
message
•BlackBerry Enterprise
Server Version 4.1 SP6 or
later
•BlackBerry Device Software
Version 4.6 or later
On supported BlackBerry devices that have
the S/MIME Support Package for
BlackBerry devices installed and turned on,
the S/MIME Support Package for
BlackBerry devices can use a shared
password known to the message sender and
recipient to encrypt messages.
Allowing the PGP Support
Package for BlackBerry
devices to use PGP key-
only encryption when
sending a PGP protected
email or PIN message
•BlackBerry Enterprise
Server Version 4.1 SP6 or
later
•BlackBerry Device Software
Version 4.6 or later
On supported BlackBerry devices that have
the PGP Support Package for BlackBerry
devices installed and turned on, the PGP
Support Package for BlackBerry devices can
use the PGP key-only, or both types of PGP
encryption, to encrypt messages.
Requiring authentication to
enable the BlackBerry
Device Software to permit
tools to run on BlackBerry
devices
•BlackBerry Device Software
Version 4.6 or later
The RIM tool authentication server enables
the BlackBerry Device Software to permit
tools to run on BlackBerry devices.
BlackBerry devices and the RIM tool
authentication server use a
challenge/response process that is
designed to authenticate communication
between them and prevent users or systems
that do not have authenticated access to
the server from using a USB connection to a
device to run tools.
Verifying that the RIM
bootROM is permitted to
run on BlackBerry devices
•BlackBerry Enterprise
Server Version 4.1 SP6 or
later
•BlackBerry Device Software
Version 4.6 or later
When a user turns on a BlackBerry device,
the processor runs internal ROM code that
reads the RIM bootROM from flash memory
and verifies the digital signature of the
bootROM code using the public keys that
the processor stores. If the verification
process is successful, the bootROM is
permitted to run on the BlackBerry device.
If the verification process fails, the
processor stops running.
www.blackberry.com

BlackBerry Enterprise Solution 9
BlackBerry encryption keys
By default, the BlackBerry Enterprise Solution generates the master encryption key and message key that the
BlackBerry Enterprise Server and BlackBerry devices use to encrypt and decrypt all data traffic between them.
The BlackBerry Enterprise Server administrator can also enable the BlackBerry device to generate and use the
content protection key to encrypt BlackBerry device user data while the BlackBerry device is locked, and
generate and use the grand master key to encrypt the master encryption key while the BlackBerry device is
locked.
Encryption key relationships on the BlackBerry device
Master encryption keys
The master encryption key is unique to the BlackBerry device. To send and receive messages, the master
encryption key stored on the BlackBerry Enterprise Server and on the BlackBerry device must match. If the
stored keys do not match, the BlackBerry device and the BlackBerry Enterprise Server cannot decrypt and must
therefore discard messages that they receive.
Where master encryption keys are stored
The BlackBerry Configuration Database, the messaging server, and the BlackBerry device flash memory store
encryption keys, including the current BlackBerry device master encryption key.
Messaging server platform Messaging server
storage location
BlackBerry device
storage location
BlackBerry Enterprise
Server storage location
IBM® Lotus® Domino® the BlackBerry profiles
database
a key store database in
flash memory
the BlackBerry
Configuration Database
Microsoft® Exchange the computer email
application user mailbox
a key store database in
flash memory
the BlackBerry
Configuration Database
Novell® GroupWise® not stored a key store database in
flash memory
the BlackBerry
Configuration Database
The BlackBerry Configuration Database stores master encryption keys alongside the BlackBerry device user data
that they protect. The BlackBerry Configuration Database, the messaging server, and the BlackBerry device flash
www.blackberry.com

BlackBerry Enterprise Solution 10
memory can also retain previous and pending master encryption keys. It is critical to protect the BlackBerry
Configuration Database and the platform-specific master encryption key storage location on the messaging
server. For more information, see “Messaging server to computer email application connection” on page 41 and
“Protecting the BlackBerry Configuration Database” on page 34.
Key storage on the BlackBerry device
On the BlackBerry device, the shared key is stored in a database in flash memory (the key store). This key storage
method is designed to prevent an attacker from extracting the key data from flash memory successfully by
backing up the data from the BlackBerry device onto a computer.
Key state Description
previous key(s) The master encryption key(s) that the BlackBerry device used before the current key was
generated.
The BlackBerry device stores multiple previous keys in flash memory for 7 days, the
maximum amount of time that the BlackBerry Enterprise Server queues a pending
message for delivery, in case the BlackBerry device user creates a new key on the
BlackBerry device multiple times while messages are still queued on the BlackBerry
Enterprise Server.
The messaging server and the BlackBerry Configuration Database store only the most
recent previous key.
pending key The master encryption key that the BlackBerry Enterprise Server administrator
generates in the BlackBerry Manager to replace the current master encryption key.
Only the messaging server and the BlackBerry Configuration Database store the
pending key. The BlackBerry Desktop Software sends the pending key to the BlackBerry
device when the BlackBerry device user connects the BlackBerry device to the computer.
The current key then becomes the new previous key, and the pending key becomes the
new current key.
How the messaging server storage location stores the master encryption keys
The Microsoft Exchange server stores the master encryption keys in a hidden folder named
BlackBerryHandheldInfo within a root folder of the BlackBerry device user's computer email application mailbox.
The BlackBerryHandheldInfo folder stores the following data:
•a message of class RIM.BlackBerry.Handheld.Config containing the BlackBerry device user's configuration
information, including the master encryption key data
•the master encryption keys in binary form with tags that indicate their state: 0x6002 (pending), 0x6003
(current), and 0x6004 (previous)
The IBM Lotus Domino server stores the master encryption keys in a database named BlackBerryProfiles.nsf that
contains configuration information for every BlackBerry device user within the /Data directory. The BlackBerry
Profiles database stores an account record containing the field RIMCurrentEncryptionKeyText, which stores the
master encryption keys in alphanumeric representation of a hexadecimal string, for every BlackBerry device user.
How master encryption keys are generated
Both the BlackBerry Enterprise Server administrator and a BlackBerry device user can generate and regenerate
master encryption keys. By default, the BlackBerry Enterprise Server sends a request to the BlackBerry Desktop
Software every 31 days to prompt users to regenerate the master encryption key on their BlackBerry devices. If
the user sets the Generate keys manually option in the BlackBerry Desktop Manager, the BlackBerry Enterprise
Server still sends a key regeneration request to the BlackBerry Desktop Software automatically.
www.blackberry.com

BlackBerry Enterprise Solution 11
Key generation method Initial key generation Key regeneration
desktop based (wired) When a BlackBerry device user connects
the BlackBerry device to the computer for
the first time, the BlackBerry Desktop
Software creates the master encryption
key and sends it to the BlackBerry device
and the messaging server.
When the BlackBerry device user
subsequently connects the
BlackBerry device to the computer,
the user can initiate regeneration of
the master encryption key. The
BlackBerry Desktop Software creates
the master encryption key and sends
it to the BlackBerry device and the
messaging server.
wireless Wireless enterprise activation permits a
BlackBerry device user to remotely
activate a BlackBerry device on the
BlackBerry Enterprise Server without a
physical network connection. During the
wireless enterprise activation, the
BlackBerry Enterprise Server and the
BlackBerry device negotiate to select the
strongest algorithm that they both
support and use that algorithm to
generate the master encryption key.
Note: For more information, see
“Authentication during wireless
enterprise activation” on page 39.
On the BlackBerry device, a user can
request a new master encryption
key. The BlackBerry device sends the
key regeneration request to the
BlackBerry Enterprise Server over the
wireless network.
In the BlackBerry Manager, the
BlackBerry Enterprise Server
administrator can initiate
regeneration of a master encryption
key for a BlackBerry device.
Computer based process for generating master encryption keys
In BlackBerry Desktop Software Version 4.0 or later, the master encryption key generation function uses the
current time as the seed for the C language srand function. The master encryption key generation function then
gathers entropy (randomness) using the following process:
1. When prompted by the BlackBerry Desktop Software, the BlackBerry device user moves the mouse. The
BlackBerry Desktop Software master encryption key generation function examines the lowest 12 bits of the x
and y coordinates of the new mouse location. If the bits are different from the previous sample, the
BlackBerry Desktop Software stores them, generating 3 bytes of randomness. If the bits are the same as the
previous sample, no sample is taken.
2. The BlackBerry Desktop Software master encryption key generation function waits for a random interval
between 50 and 150 milliseconds, and then continues to sample in the same way until it gathers 384 bytes.
3. The BlackBerry Desktop Software retrieves 384 bytes of randomness from the MSCAPI, for a total of 768
bytes.
4. The BlackBerry Desktop Software hashes the 384 bytes of randomness from the BlackBerry device user’s
mouse coordinates and the 384 bytes of randomness from the MSCAPI with SHA-512 to produce 512 bits of
data. The BlackBerry Desktop Software frees the memory associated with the unused bits.
5. The BlackBerry Desktop Software uses the first 256 bits if it is generating the master encryption key using
AES encryption or the first 128 bits if it is generating the master encryption key using Triple DES encryption.
The BlackBerry Desktop Software discards any unused bits.
BlackBerry Enterprise Server versions earlier than 4.0 use a different desktop based master encryption key
generation process. For more information, see “Appendix C: Previous version of wired master encryption key
generation” on page 74.
www.blackberry.com

BlackBerry Enterprise Solution 12
Process for generating master encryption keys over the wireless network
To establish and manage master encryption keys over the wireless network, the BlackBerry Enterprise Server
uses the initial key establishment protocol and the key rollover protocol. Both protocols provide strong
authentication: only a BlackBerry device with a valid work email address and an activation password can initiate
wireless enterprise activation and master encryption key generation.
Protocol Description
initial key establishment
protocol
•The BlackBerry Enterprise Server uses this protocol during wireless
enterprise activation to establish the initial master encryption key.
•This protocol uses SPEKE to initialize a key generation process using an
activation password, enabling a BlackBerry device to establish long term
public keys and a strong, cryptographically protected connection with a
BlackBerry Enterprise Server.
key rollover protocol •The BlackBerry device and the BlackBerry Enterprise Server use this protocol
to regenerate a master encryption key, based on the existing master
encryption key. When a BlackBerry device user physically connects the
BlackBerry device to the computer, if a pending key exists, the current master
encryption key on the BlackBerry device becomes a previous key and the
pending key replaces the current key. If no pending key exists, the
BlackBerry Desktop Software creates a new master encryption key for the
user.
•This protocol generates the master encryption key using existing long-term
public keys and the ECMQV algorithm to negotiate a common key in such a
way that an unauthorized party cannot calculate the same key.
•This protocol achieves perfect forward secrecy. The new master encryption
key is independent of the previous key. Knowledge of the previous master
encryption key does not permit an attacker to learn the new master
encryption key.
For more information about the wireless master encryption key generation protocols, see “Authentication during
wireless enterprise activation” on page 39.
Message keys
The BlackBerry Enterprise Server and the BlackBerry device generate one or more message keys, which are
designed to protect the integrity of data such as short keys or large messages, for each message that they send.
If a message contains several datagrams and exceeds 2 KB, the BlackBerry Enterprise Server and the BlackBerry
device generate a unique message key for each datagram.
Each message key is comprised of random information, which makes it difficult for a third party to decrypt, re-
create, or duplicate the key.
The message key is a session key; the BlackBerry device does not store the message key persistently but frees
the memory associated with it after using it in the decryption process.
Process for generating message keys on the BlackBerry Enterprise Server
The BlackBerry Enterprise Server is designed to seed a DSA PRNG function to generate a message key using the
following process:
1. The BlackBerry Enterprise Server obtains random data from multiple sources for the seed, using a technique
derived from the initialization function of the ARC4 encryption algorithm.
2. The BlackBerry Enterprise Server uses the random data to permute the contents of a 256-byte (2048-bit)
state array.
www.blackberry.com

BlackBerry Enterprise Solution 13
If the MSCAPI exists on the computer on which the BlackBerry Enterprise Server is running, the BlackBerry
Enterprise Server also requests 512 bits of randomness from the MSCAPI to increase the amount of entropy.
3. The BlackBerry Enterprise Server inputs the state array into the ARC4 algorithm to further randomize the
array.
4. The BlackBerry Enterprise Server draws 521 bytes from the ARC4 state array.
Note: The BlackBerry Enterprise Server draws the additional 9 bytes (512 + 9=521) to make sure that the
pointers before and after the call are not in the same place, and to take into account that the first few bytes
of the ARC4 state array might not be truly random.
5. The BlackBerry Enterprise Server uses SHA-512 to hash the 521-byte value to 64 bytes.
6. The BlackBerry Enterprise Server uses the 64-byte value to seed a NIST-approved DSA PRNG function. For
more information about the DSA PRNG function, see Federal Information Processing Standard – FIPS PUB
186-2.
The BlackBerry Enterprise Server stores a copy of the seed in a file. When the BlackBerry Enterprise Server
restarts, it reads the seed from the file and uses the XOR function to compare the stored seed with the new
seed.
7. The DSA PRNG function generates 128 pseudo-random bits for use with Triple DES and 256 pseudo-random
bits for use with AES.
8. The BlackBerry Enterprise Server uses the pseudo-random bits with the appropriate algorithm to generate
the message key.
Process for generating message keys on the BlackBerry device
The BlackBerry device is designed to seed a DSA PRNG function to generate a message key using the following
process:
1. The BlackBerry device obtains random data from multiple sources for the seed, using a technique derived
from the initialization function of the ARC4 encryption algorithm.
2. The BlackBerry device uses the random data to permute the contents of a 256-byte (2048-bit) state array.
3. The BlackBerry device inputs the state array into the ARC4 algorithm to further randomize the array.
4. The BlackBerry device draws 521 bytes from the ARC4 state array.
Note: The BlackBerry device draws the additional 9 bytes (512 + 9=521) to make sure that the pointers
before and after the call are not in the same place, and to take into account that the first few bytes of the
ARC4 state array might not be truly random.
5. The BlackBerry device uses SHA-512 to hash the 521-byte value to 64 bytes.
6. The BlackBerry device uses the 64-byte value to seed a NIST-approved DSA PRNG function. For more
information about the DSA PRNG function, see Federal Information Processing Standard – FIPS PUB 186-2.
The BlackBerry device stores a copy of the seed in a file. When the BlackBerry device restarts, it reads the
seed from the file and uses the XOR function to compare the stored seed with the new seed.
7. The DSA PRNG function generates 128 pseudo-random bits for use with Triple DES and 256 pseudo-random
bits for use with AES.
8. The BlackBerry device uses the pseudo-random bits with the appropriate algorithm to generate the message
key.
Content protection keys
When the BlackBerry Enterprise Server administrator turns on or the BlackBerry device user turns on content
protection on the BlackBerry device, the BlackBerry device generates encryption keys, including the content
www.blackberry.com

BlackBerry Enterprise Solution 14
protection key, that are designed to encrypt the user data on the BlackBerry device when the BlackBerry device
is locked.
During the encryption process that begins when the BlackBerry device is locked, the BlackBerry device frees the
memory that it associates with the content protection key and the ECC private key that it stores in RAM. The
BlackBerry device then uses the ECC public key, an asymmetric key, to encrypt new BlackBerry device user data
that it receives.
When the BlackBerry device is unlocked, the BlackBerry device decrypts the content protection key and the ECC
private key in flash memory. The BlackBerry device then uses the ECC private key and the content protection key
to decrypt user data on the BlackBerry device.
For more information, see “Protected storage of user data on a locked BlackBerry device” on page 29.
Process for generating content protection keys
When the BlackBerry Enterprise Server administrator turns on or the BlackBerry device user turns on content
protection of data for the first time, the following process occurs:
1. The BlackBerry device uses the NIST-approved DSA PRNG to randomly generate the content protection key,
a semi-permanent 256 bit AES encryption key.
2. The BlackBerry device generates an ECC key pair of a bit length that the BlackBerry device user or the
BlackBerry Enterprise Server administrator determines.
3. The BlackBerry device prompts the user to type the BlackBerry device password.
4. The BlackBerry device derives an ephemeral 256 bit AES encryption key from the BlackBerry device
password, in accordance with PKCS #5 (the password based cryptography standard). For more information,
see “Appendix E: Process for deriving encryption keys that protect the keys used with content protection”
on page 77.
5. The BlackBerry device uses the ephemeral key to encrypt the content protection key and the ECC private
key.
6. The BlackBerry device stores the encrypted content protection key, the encrypted ECC private key, and the
ECC public key in flash memory.
If the BlackBerry device user changes the BlackBerry device password, the BlackBerry device uses the new
password to derive a new ephemeral key and uses the new ephemeral key to re-encrypt the encrypted
versions of the content protection key and the ECC private key in flash memory.
Process for encrypting user data on an unlocked BlackBerry device
The unlocked BlackBerry device uses the content protection key to encrypt data that the user types or otherwise
adds on the BlackBerry device, or that the BlackBerry device receives.
Process for encrypting user data on a locked BlackBerry device
1. The BlackBerry device locks. When the BlackBerry device locks for the first time after the BlackBerry
Enterprise Server administrator turns on or the BlackBerry device user turns on content protection, it uses
the content protection key to automatically encrypt the bulk of its stored user and application data.
2. The BlackBerry device frees the memory associated with the decrypted content protection key and the
decrypted ECC private key stored in RAM.
3. The locked BlackBerry device uses the ECC public key to encrypt data that it receives.
Process for decrypting user data on an unlocked BlackBerry device
1. A user types the correct BlackBerry device password to unlock the BlackBerry device.
2. The BlackBerry device uses the BlackBerry device password to derive the ephemeral 256 bit AES encryption
key again.
www.blackberry.com

BlackBerry Enterprise Solution 15
3. The BlackBerry device uses the ephemeral key to decrypt the encrypted content protection key and the
encrypted ECC private key in flash memory.
4. The BlackBerry device stores the decrypted content protection key and the decrypted ECC private key in
RAM.
5. If the BlackBerry device user attempts to access user data that the BlackBerry device encrypted while it was
unlocked, the BlackBerry device uses the decrypted content protection key to decrypt the user data.
6. If a BlackBerry device user attempts to access user data (for example, opens a message) that the BlackBerry
device encrypted while it was locked, the BlackBerry device uses the decrypted ECC private key to decrypt
the user data and access the ECC-encrypted items (for example, message bodies, subjects, or recipients).
7. When the BlackBerry device has opened 128 ECC-encrypted items (typically, less than 40 messages), the
BlackBerry device uses the ECC private key to decrypt the ECC-encrypted items and then re-encrypts them
with the content protection key the next time that the BlackBerry device locks. If the re-encryption process
is incomplete when the BlackBerry device user next unlocks the BlackBerry device, the BlackBerry device
resumes re-encryption when it locks again.
Grand master keys
When the BlackBerry Enterprise Server administrator turns on content protection of master encryption keys, the
BlackBerry device uses a grand master key to encrypt the master encryption keys stored on the BlackBerry
device in flash memory. When the BlackBerry device receives data encrypted with a master encryption key while
it is locked, it uses the grand master key to decrypt the required master encryption key in flash memory and
receive the data.
For more information, see “Protected storage of master encryption keys on a locked BlackBerry device” on page
31.
Process for generating grand master keys
When the BlackBerry Enterprise Server administrator turns on content protection of master encryption keys on
the BlackBerry device for the first time, the following process occurs:
1. The BlackBerry device generates the grand master key, a 256 bit AES encryption key.
2. The BlackBerry device stores the decrypted grand master key in RAM.
3. The BlackBerry device uses the existing content protection key to encrypt the grand master key.
4. The BlackBerry device stores the encrypted grand master key in flash memory.
5. The BlackBerry device uses the decrypted grand master key to encrypt the master encryption keys stored in
BlackBerry device flash memory.
BlackBerry symmetric key encryption algorithms
A symmetric key encryption algorithm is designed so that only the parties who know the secret key can decrypt
the encrypted data or cipher text of the scrambled message.
The BlackBerry Enterprise Solution uses a symmetric key encryption algorithm to protect all data that the
BlackBerry device sends or receives, while the data is in transit between the BlackBerry device and the
BlackBerry Enterprise Server. This standard BlackBerry encryption, which is designed to provide strong security,
verifies that a BlackBerry message remains protected in transit to the BlackBerry Enterprise Server while the
message data is outside your organization’s firewall.
www.blackberry.com

BlackBerry Enterprise Solution 16
The BlackBerry Enterprise Solution uses either the Triple DES or the AES algorithm for standard BlackBerry
encryption. By default, the BlackBerry Enterprise Server is set to use the strongest common symmetric key
encryption algorithm, of either Triple DES or AES, that both the BlackBerry Enterprise Server and the BlackBerry
device support.
Encryption algorithm Description
Triple DES The BlackBerry Enterprise Solution uses three iterations of the DES algorithm with
two 56-bit keys in outer CBC mode for an overall key length of 112 bits. For more
information, see Federal Information Processing Standard - FIPS PUB 81 [3].
In the two-key Triple DES algorithm, the first key encrypts the data, the second key
decrypts the data, and then the first key encrypts the data again.
Message keys and master encryption keys that the BlackBerry Enterprise Solution
produces using Triple DES contain 112 bits of key data and 16 bits of parity data,
which are stored as a 128-bit long binary string. Each parity bit is stored in the least
significant bit of each of the 8 bytes of key data.
AES A competition to design an algorithm with a better combination of security and
performance than DES or Triple DES produced AES. AES offers a larger key size
than DES or Triple DES to provide greater security against brute-force attacks. The
BlackBerry Enterprise Solution uses AES with 256-bit keys in CBC mode to encrypt
data that the BlackBerry Enterprise Server and the BlackBerry device send between
them.
The BlackBerry device implementation of AES includes power analysis and
electromagnetic analysis countermeasure protection that is designed to address the
potential of side-channel attacks against the BlackBerry device. The AES
implementation uses masking countermeasures to hide the true operations taking
place on the BlackBerry device so that power analysis readings or electromagnetic
radiation emissions do not reveal information that can expose the encryption key.
For more information, see “Appendix F: Power and electromagnetic side-channel
attacks and countermeasures” on page 78.
The AES message keys and master encryption keys that the BlackBerry Enterprise
Solution uses contain 256 bits of key data.
When the BlackBerry device supports AES, the BlackBerry Enterprise Solution uses AES for BlackBerry transport
layer encryption by default. Visit www.blackberry.com/knowledgecenterpublic/ to view the article KB-05429
“What Is - Recommendation on the use of Triple DES or AES for BlackBerry transport layer encryption” for more
information on how the BlackBerry Enterprise Server uses AES transport layer encryption for all communication
with BlackBerry devices.
Software requirements for BlackBerry encryption algorithms
Encryption algorithm BlackBerry Enterprise
Server
BlackBerry Device
Software
BlackBerry Desktop
Software
Triple DES any version any version any version
AES 4.0 or later 4.0 or later 4.0 or later
If the BlackBerry Enterprise Server is set to permit the use of both Triple DES and AES and a BlackBerry device
user is running the BlackBerry Device Software or the BlackBerry Desktop Software Version 3.7 or earlier, the
BlackBerry Enterprise Solution generates that user’s BlackBerry device master encryption keys using Triple DES.
Otherwise, the BlackBerry Enterprise Solution generates master encryption keys using AES.
www.blackberry.com

BlackBerry Enterprise Solution 17
Standard BlackBerry message encryption
Standard BlackBerry encryption is designed to encrypt messages that the BlackBerry device sends or that the
BlackBerry Enterprise Server forwards to the BlackBerry device. Standard BlackBerry encryption encrypts the
message
•from the time a user sends an email message from the BlackBerry device until the BlackBerry Enterprise
Server receives the message
•from the time the BlackBerry Enterprise Server receives a message sent to a BlackBerry device
user until that user reads the message on the BlackBerry device
When a user sends a message from the BlackBerry device, the BlackBerry Enterprise Server does not encrypt the
message when it forwards the message to the message recipient unless the BlackBerry device user installs
additional secure messaging technology on the BlackBerry device and the BlackBerry Enterprise Server
administrator has enabled the BlackBerry device to use that secure messaging technology to extend the
messaging security. For more information, see “Extending BlackBerry device messaging security” on page 22.
Process for standard BlackBerry message encryption
When a user sends a message from the BlackBerry device, the BlackBerry device and BlackBerry Enterprise
Server use symmetric key cryptography to encrypt and decrypt the message, using the following process:
1. The BlackBerry device compresses the message.
2. The BlackBerry device encrypts the message using the message key.
3. The BlackBerry device encrypts the message key using the master encryption key, which is unique to that
BlackBerry device.
4. The BlackBerry device sends the encrypted message key and the encrypted message.
5. The BlackBerry Enterprise Server receives the encrypted message key and the encrypted message from the
BlackBerry device.
6. The BlackBerry Enterprise Server decrypts the message key using the BlackBerry device master encryption
key.
7. The BlackBerry Enterprise Server decrypts the message using the message key.
8. The BlackBerry Enterprise Server decompresses the message, and then forwards the message to the
intended recipient.
When a BlackBerry device user receives a message, the following occurs:
1. The BlackBerry Enterprise Server receives the message.
2. The BlackBerry Enterprise Server compresses the message.
3. The BlackBerry Enterprise Server encrypts the message using the message key.
4. The BlackBerry Enterprise Server encrypts the message key using the user’s BlackBerry device master
encryption key.
5. The BlackBerry Enterprise Server sends the encrypted message and the encrypted message key to the user’s
BlackBerry device.
6. The BlackBerry device receives the encrypted message and the encrypted message key.
7. The BlackBerry device decrypts the message key using the master encryption key, which is unique to that
BlackBerry device.
8. The BlackBerry device decrypts the message using the message key.
9. The BlackBerry device decompresses the message, rendering it readable by the BlackBerry device user.
www.blackberry.com

BlackBerry Enterprise Solution 18
Permitting third-party applications to encode BlackBerry device data
The BlackBerry Enterprise Server and the BlackBerry Device Software support a Transcoder API. This API permits
third-party application developers to create encoding schemes that encrypt, convert, or otherwise change the
format of data, and apply an encoding scheme to BlackBerry device data using transcoder application code. The
third-party encoding scheme prepends a transcoder ID to the data that it encodes. The BlackBerry Enterprise
Solution then encrypts the transcoder-encoded data using standard BlackBerry encryption.
The BlackBerry Enterprise Solution permits only third-party encoding schemes that the RIM signing authority
system has digitally signed using the RIM Cryptographic API public key to access the Transcoder API to create
the transcoder application code. To apply the third-party encoding scheme, the BlackBerry device must be
running corresponding transcoder application code.
Third-party application developers can use the Transcoder API to add cryptographic components that the RIM
Cryptographic API does not support by default to their third-party encoding schemes. The BlackBerry Enterprise
Solution applies the third-party encoding schemes to any outgoing data to which standard BlackBerry
encryption applies. The Transcoder API supports use of all the cryptography that the RIM Cryptographic API
supports.
If the BlackBerry Enterprise Server administrator allows third-party applications to use the Transcoder API on the
BlackBerry device, those applications, if not functioning correctly, might impact the security, usability and
performance of the BlackBerry Enterprise Solution, and might cause loss of BlackBerry device data. To use the
third-party encoding scheme, the BlackBerry Enterprise Server administrator must use the Security Transcoder
Cod File Hashes IT policy rule to specify the .cod file for the third-party encoding scheme that the BlackBerry
device permits to register as a transcoder. For more information about using the Security Transcoder Cod File
Hashes IT policy rule, see the Policy Reference Guide.
BlackBerry wireless messaging security
The BlackBerry Enterprise Solution is designed with advanced security features to work seamlessly with existing
networks while enabling BlackBerry device users to securely send and receive messages while away from their
computers. Email messages remain encrypted at all points between the BlackBerry devices and the BlackBerry
Enterprise Server.
Receiving an email message on the BlackBerry device
Sending a message from a computer to the BlackBerry device
1. Alice sends a message to Bob from her computer. Alice and Bob work at the same organization.
2. The messaging server receives the email message and notifies the BlackBerry Enterprise Server that the
message has arrived.
3. The messaging server delivers the message to Bob’s computer.
4. The BlackBerry Enterprise Server retrieves the message from the messaging server.
5. The BlackBerry Enterprise Server queries the messaging server for BlackBerry device user preferences to
determine whether or not to forward the message to Bob’s BlackBerry device.
6. The BlackBerry Enterprise Server compresses and encrypts the message.
7. The BlackBerry Enterprise Server places the message in the outgoing queue.
www.blackberry.com

BlackBerry Enterprise Solution 19
The BlackBerry Enterprise Server is designed to maintain a constant, direct outbound TCP/IP connection to
the wireless network over the Internet through the firewall on port 3101 (or 4101 in the case of a BlackBerry
device that supports implementation alongside an enterprise Wi-Fi network). This constant connection
enables the efficient, continuous delivery of data to and from the BlackBerry device.
8. The wireless network routes and then delivers the encrypted message to Bob’s BlackBerry device.
9. Bob’s BlackBerry device receives the encrypted message. The BlackBerry device then decrypts and displays
the message for Bob to read.
Sending an email message from the BlackBerry device
Sending a message from a BlackBerry device to the computer
1. Bob responds to Alice’s message by composing an email on the BlackBerry device. When Bob sends the
message, the BlackBerry device compresses, encrypts, and then sends the message over the wireless
network.
All messages that users create on their BlackBerry devices contain the necessary BlackBerry Enterprise
Server routing information for the wireless network to make sure that the wireless network delivers the
message to the appropriate BlackBerry Enterprise Server.
2. The BlackBerry Infrastructure routes the encrypted message to the BlackBerry Enterprise Server on which
the BlackBerry device user resides.
The connection from the BlackBerry Enterprise Server to the BlackBerry Infrastructure is a two-way TCP
connection on port 3101. The BlackBerry Infrastructure directs messages from the BlackBerry device to this
connection using the routing information in the message.
3. The BlackBerry Enterprise Server receives the message.
4. The BlackBerry Enterprise Server decrypts, decompresses, and sends the message to the messaging server.
The BlackBerry Enterprise Server does not store a copy of the message.
5. The messaging server delivers the message to Alice’s computer.
Message attachment viewing security features
The BlackBerry device supports attachment viewing through the BlackBerry Attachment Service. The BlackBerry
Attachment Service enables users to perform the following actions on their BlackBerry devices:
•view Microsoft® PowerPoint® slide shows, including those in .pps file format
•view .bmp, .jpg, .jpeg, .gif, .png, .tif, .tiff, and .wmf file formats
•view .doc, .dot, .txt .html, .htm, .pdf, .xls, .wpd, and .ppt documents in a browser
•open .zip files and then open any content files of supported formats
•open .wav files
•enlarge images in .tiff format (such as scanned documents or faxes)
•access inline thumbnail images for attachments that are embedded in messages
The BlackBerry Attachment Service is designed to prevent malicious applications from accessing data on the
BlackBerry device by using binary format parsing to open the attachments and prepare them to be sent to the
BlackBerry device for rendering. The BlackBerry device does not run applications that are sent as attachments in
email messages.
www.blackberry.com

BlackBerry Enterprise Solution 20
The system administrator can install the BlackBerry Attachment Service on a remote computer and then place
that computer on its own network segment to prevent the spread of potential attacks from the BlackBerry
Attachment Service to another computer within your organization’s network. In a segmented network, attacks
are isolated and contained on a single area of the network. Using segmented network architecture is designed to
improve the security and performance of the BlackBerry Attachment Service network segment by filtering out
attachment data that is not destined for other network segments. For more information about placing the
BlackBerry Enterprise Solution components in a network architecture that is segmented, see Placing the
BlackBerry Enterprise Solution in a Segmented Network.
Viewing attachments in PGP encrypted or S/MIME-encrypted messages
The BlackBerry Enterprise Server administrator can use the S/MIME Allowed Encrypted Attachment Mode IT
policy rule and the PGP Allowed Encrypted Attachment Mode IT policy rule to specify the least restrictive mode
that the BlackBerry device can use to retrieve PGP (OpenPGP (RFC 2440) or PGP/MIME (RFC 3156) message
formatting) encrypted and S/MIME-encrypted attachment information.
When a user receives an OpenPGP encrypted message that includes an attachment, the BlackBerry Enterprise
Server reads the attachment header data and is designed to send the message and the encrypted message key
to the BlackBerry device automatically.
When a user receives a PGP/MIME encrypted or S/MIME-encrypted message that includes an attachment on the
BlackBerry device, depending on the setting of the S/MIME Allowed Encrypted Attachment Mode IT policy rule
or the PGP Allowed Encrypted Attachment Mode IT policy rule, the following actions can occur automatically
when the user opens the message, or when the user requests the actions manually.
1. The BlackBerry device sends the message key and a request for the attachment header data to the
BlackBerry Enterprise Server.
2. The BlackBerry Enterprise Server uses the message key to decrypt the message and access the attachment
header data.
3. The BlackBerry Enterprise Server sends the attachment header data to the BlackBerry device.
4. The BlackBerry device processes the attachment header data with the message and displays the associated
attachment information so that the user can select the attachment for viewing.
When the user tries to view an attachment that is encrypted using S/MIME, PGP/MIME, or OpenPGP on the
BlackBerry device, the following actions occur:
1. The BlackBerry device sends the message key and a request for the attachment data to the BlackBerry
Enterprise Server.
2. The BlackBerry Enterprise Server uses the message key to decrypt the message and access the attachment
data that corresponds to the attachment header data.
3. The BlackBerry Enterprise Server decrypts the attachment and sends the rendered attachment data to the
BlackBerry device.
4. The BlackBerry device displays the attachment.
Note: To protect the decrypted attachment data that the BlackBerry device stores, turn on content protection.
PIN-to-PIN messaging
A PIN uniquely identifies each BlackBerry device and BlackBerry enabled device on the wireless network. If a
BlackBerry device user knows the PIN of another BlackBerry device, the user can send a PIN message to that
BlackBerry device. Unlike an email message that the BlackBerry device user sends to an email address, a PIN
message bypasses the BlackBerry Enterprise Server and your organization’s network.
PIN message scrambling
During the manufacturing process, Research In Motion (RIM) loads a common peer-to-peer, or PIN-to-PIN,
encryption key onto BlackBerry devices. Although the BlackBerry device uses the peer-to-peer encryption key
www.blackberry.com