SAN JOSE, Calif., USA February 3, 2003 -- Phoenix Technologies Ltd. (Nasdaq: PTEC), the company driving the global core systems software standard in billions of PC systems and connected digital devices for nearly a quarter-century, has licensed its Simple Password Exponential Key Exchange (SPEKETM) technology to Interlink Networks, a leading developer of network security and access control software. Under the agreement, Interlink is using the Phoenix Security Software Development Kit (SDK) to enable its Secure.XS product line to provide secure authentication of local and remote clients over wireless links to enterprise network infrastructures.
“SPEKE technology will increase security in our wireless LAN software because it encrypts user passwords into complex binary numbers that can’t be intercepted during transmission,” said Mike Klein, President and CEO of Interlink Networks. “The user ID and password authentication method, augmented with SPEKE, is easy to manage and avoids the complexity and costs of installing certificates and administering keys. SPEKE adds real value to our products because it offers immunity from password sniffing and dictionary-based attacks while controlling IT costs.”
SPEKE is a zero knowledge password proof (ZKPP) solution that verifies passwords much more securely than other zero-knowledge technologies. SPEKE further provides strong mutual authentication and key exchange, and it works without depending on Public Key Infrastructure, certificate management, or other user approaches. Because the password is not exposed during the user and device verification process, organizations do not need to force frequent password changes and can use reasonable password policies. Phoenix licenses SPEKE broadly so that all companies can provide mutual authentication of users and servers with ease and safety.
Older password authentication protocols are insecure because they let anyone who observes a single run of the protocol to verify an unlimited number of guesses, without detection. The widespread awareness of the serious flaws in original 802.11 WEP have stimulated renewed and vigorous efforts to insure that today’s security is much tighter and safer. The new wireless security standards, currently being developed in the IEEE and the IETF, embrace and accommodate some of the best available cryptographic technologies. SPEKE is a natural fit with the new 802.11 capability for modular authentication and key establishment.
“Password sniffing and dictionary-based attacks are major security threats in today’s connected network environments,” said Albert E. Sisto, Chairman, President and CEO for Phoenix. “Our SPEKE technology directly addresses this problem in a completely unique and effective way without having to retrain users. Phoenix has a long history of developing core system software solutions, and now we’re using that experience to create many other vital solutions at multiple points in the foundation of PCs and digital devices.”
About SPEKETM
SPEKE (Simple Password Exponential Key Exchange) uses a cryptographic handshake to perform mutual authentication and establish session keys. SPEKE is the leading cryptographic system for zero-knowledge password proof, a method that reveals nothing about the password to either party, other than whether they already share it. The protocol never transmits the password, and no other information is exposed to help attackers guess it. The Phoenix Security Software Development Kit (SDK) is an implementation of SPEKE that makes it easy to embed this technology in client/server applications.
About Interlink Networks
Interlink Networks is a leader in securing 802.11 wireless LAN, mobile, and wired networks. The company’s standards-based software blocks intruders’ access to networks using strong 802.1x authentication. Interlink’s offerings range from carrier-class and enterprise level solutions to appliance-ready software - ideal for OEM development designs. Interlink Networks is headquartered in Ann Arbor, Michigan. For more information, call (734) 821-1200 or visit http://www.interlinknetworks.com.
About Phoenix Technologies
Founded in 1979, Phoenix Technologies (NASDAQ: PTEC) is a global leader in device-enabling and management software products for PCs and other connected digital devices. Phoenix FirstWareTM family of “instant on” software activates, secures, connects, and recovers digital devices and is designed into many millions of industry standard desktop, notebook, server, and information appliance systems sold annually. This enables Phoenix customers – specifiers, developers, and manufacturers of user-driven microprocessor systems – to reduce costs and provide significant value-added features to their customers. Headquartered in San Jose, California, Phoenix Technologies has offices worldwide. For more information about Phoenix Technologies, visit our website at http://www.phoenix.com/
Phoenix and Phoenix Technologies are registered trademarks of Phoenix Technologies. All other trademarks are the property of their respective owners.