ScramFS

Why did you engage leading cryptographers and university professors to design and peer-review your cryptosystems?

By Scram Software 11 September 2017

We took the approach because the world faces a dilemma: more than ever, the world needs high quality secure encryption systems, but there is a worldwide shortage of people able and qualified to design such systems.

Quoting famous cryptography advocate and early Tor contributor, Lucky Green:

The present need for security products far exceeds the number of individuals capable of designing secure systems. Consequently, industry has resorted to employing folks and purchasing “solutions” from vendors that shouldn’t be let near a project involving securing a system.

In our own words, the task of designing a secure cryptographic system is extremely challenging, requiring the very highest levels of cryptographic expertise to achieve. There are, unfortunately, comparatively few people in the world skilled enough to design such a system.

It is standard practice for applications with encryption systems to be designed and implemented by software developers (as distinct from cryptographers), whose primary role is to develop applications. There is no shortage of applications whose website state “Military grade encryption” or “AES-256” as bullet-point features. Encryption is most often a feature of an application, not the core system itself. The vendors of these applications do not publish further details about their encryption systems, and the general public, unaware of the problems, tend to view encryption as a “tick the box” requirement.

And given that even large, reputable corporations like IBM and RSA have intentionally introduced weaknesses into their crypto systems over time, it is becoming increasingly difficult to know which systems to trust.

Our approach of commissioning leading cryptography experts from world renowned universities and research institutions to design, implement, peer-review and audit our system is in direct response to the dilemma faced by the world regarding encryption products.

We believe that we are the pioneers in taking this approach, and we’re proud to partner with a variety of industry experts to help improve the quality of encryption solutions worldwide.

We’ll further elaborate on our approach in the answers to further questions, below.