{"id":10426,"date":"2023-04-27T21:47:28","date_gmt":"2023-04-27T21:47:28","guid":{"rendered":"https:\/\/fieldtrust.be\/?p=10426"},"modified":"2023-04-27T21:56:04","modified_gmt":"2023-04-27T21:56:04","slug":"keeper-the-only-enterprise-password-manager-to-use-elliptic-curve-cryptography","status":"publish","type":"post","link":"https:\/\/fieldtrust.be\/nl\/keeper-the-only-enterprise-password-manager-to-use-elliptic-curve-cryptography","title":{"rendered":"Keeper \u2013 The Only Enterprise Password Manager to Use Elliptic Curve Cryptography"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Keeper\u2019s Enterprise Password Manager<\/a> is the only solution that uses Elliptic Curve Cryptography (ECC) in its encryption, making it the most secure password management solution available.<\/p>

ECC is a public-key cryptography method based on the mathematics of elliptic curves. First proposed in 1985<\/a>, it recently rose to prominence with modern cryptography as it provides a higher level of security compared to traditional encryption methods, such as RSA.<\/p>

Considered by the InfoSec community to be the most secure level of encryption for information security, ECC provides many advantages including:<\/p>

  1. Best-in-Class Security<\/strong>: The difficulty of solving elliptic curves provides an added level of protection against complex cyberattacks such as quantum computing.\u00a0<\/li><\/ol>
    1. Efficiency<\/strong>: ECC uses smaller key sizes compared to other encryption algorithms, such as RSA. This makes it more efficient in terms of computation and storage requirements as it uses limited resources.<\/li><\/ol>
      1. Fast Computation<\/strong>: ECC is faster than other encryption algorithms, making it an ideal choice for applications that require fast encryption and decryption.<\/li><\/ol>

        Keeper\u2019s encryption model documentation<\/a> compares the strength of 256-bit elliptic curves against vaults encrypted with password-derived keys.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        No Master Password Needed<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        The deployment of Keeper through a Single Sign-On (SSO) identity provider eliminates the need for a master password. Instead, Keeper uses ECC to encrypt and decrypt data, allowing for a seamless login experience with SSO and passwordless technology.\u00a0<\/p>

        A local ECC-256 (secp256r1) private key is used to decrypt the Data Key at the device level, which unwraps the individual folder keys and record keys for the latter to decrypt each of the stored record contents.<\/p>

        The Encrypted Data Key is then transmitted between the devices through a push system or key exchange service called Device Approval<\/a>, which is managed by the admin to preserve zero knowledge.<\/p>

        Without a master password to prey on, the threat of brute force attacks<\/a> against stored data is eliminated.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t\t\t
        \n\t\t\t\t\t
        \n\t\t\t
        \n\t\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Keeper Complements SSO to Cover Any Security Gaps<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        SSO\u2019s ease-of-use and ease-of-access have made it a preferred solution to remedy password-related issues, but it still presents serious security gaps as a single point of failure<\/a>.\u00a0<\/p>

        For instance, users automatically get locked out of multiple sites and apps versus only one if they forget their password. Should a user\u2019s account get hacked, cybercriminals would be able to gain access to all associated sites and apps, compromising the entire layer of security SSO was tasked with providing in the first place.<\/p>

        Even with SSO, privileged access users still need one secure location to safely store non-SSO passwords, SSH keys, API keys, etc. that \u2013 just like SSO assets \u2013 require role-based access, configurable control of policies and sharing capabilities.<\/p>

        Keeper integrates with all major SSO solutions<\/a> and is a perfect complement for the legacy applications and other use cases that SSO doesn\u2019t cover. IT Admins and IT Security professionals love using Keeper for its:\u00a0<\/p>