Secure Smartphone

Secure Calls
Making encrypted voice calls with VoIP technology. Point-to-point voice encryption of VoIP calls on any network – 2G, 3G, 4G, Wi-Fi. The most robust encryption algorithms currently available-AES and Twofish. Diffie-Hellman key generation and exchange with SHA256 hash function. Key authentication with hash reading. Future Security (Forward Security) – encryption keys are destroyed as soon as the call ends.

Secure SMS
Sending encrypted SMS. Based on the same robust encryption algorithms used for voice encryption-initial key generation and exchange with Diffie-Hellmann 4096-bit, message encryption with AES256 and Twofish with 256-bit key length.

Hardened Operating System with Secure Boot and Continuous Integrity Checks
Secure Android operating system built from source code with granular security management. Security-optimized and simplified components and communication stack. Transparent and secure boot chain with secure boot, kernel, recovery, kernel objects and APKs all with digitally signed keys. Checks during operation of core applications and services ensure that only signed and trusted code is loaded into the device.

Configurable Operating System Security Profiles
Hardware controller module and permission management module control access to network, data, and sensors (camera, microphone, etc.) allowing control of indivdual security policies.

Modem Firewall
Unique protection against over-the-air attacks with constant monitoring of modem activity. Detection of modem attacks and initiation of countermeasures. Detection of attempts to track user location with SS7 or Silent SMS attacks.

Hardware Anti-Tampering with Attempt Highlighting
Dedicated safety modules with CPU supervisor, watchdog timer, on-chip temperature sensor, and anti-removal coating. Circuit for shield removal detection, Environmental Failure Protection (EFP) for temperature, voltage, internal clock frequency, and duty cycles managed by circuit for immediate reset. Supports higher security levels such as FIPS 140-2 and Common Criteria.

Trusted Platform Module (TPM) for Certification and Platform Control
TPM Trusted Computing Group (TCG) level 2 specifications, version 1.2, revision 116. Active shielding and room sensors. Memory Protection Unit (MPU). Hardware and software protection against code injection.

Configurable Operating System Security Profiles
Hardware module controller and reinforced module for controlling access to network, data and sensors (photo/video camera, microphone, etc.) for managing individual security policies.

Encrypted Storage System
For contacts, messages and notes with smart folders, protects data against unauthorized access when not in use.

Verifiable Source Code
The Secure Phone is among the very few secure phones on the market with the source code available for independent analysis. The source code can be checked for the absence of backdoors, encryption key capture systems, centralized generation (held by the manufacturer) of encryption keys, and do not require storage of the keys themselves.

Compatibility
Compatible with a range of desk phones and satellite phones as well as an IP PBX.