Extremely Secure Communication

Companies nowadays rely on the Internet for various purposes. One of these, is communication between employees or work teams at different locations. Suspicions of governmental agencies performing traffic collection and decryption exist, posing the threat of companies having their Internet communication leaked. This is specially relevant when confidential information is transmitted and their business secrets might be at risk. This research shows how an extremely secure communication on the Internet can be deployed for work teams and individuals around the globe. Having the knowledge that random number generators used for cryptographic operations might contain backdoors, a true random number generator was implemented. This random number generator is based on an older true random number generator project, which uses a single PN junction for noise generation, and will include new features and more noise sources: a second PN junction and a jitter-based noise generator. This device improves the entropy of the Linux system used by clients, improving the cryptographic operations. Companies, often have Virtual Private Networks (VPNs), which employees can use when are outside of the company. These not only provide an isolation layer, but also access to internal services. However, this means that communication between employees will always go through a central location, making all communication easier to obtain. This happens because only the Internet link to the location of the VPN server needs to be tapped. In order to avoid this, a multipoint VPN is used. The technology used is Dynamic Multipoint Virtual Private Network (DMVPN). With a multipoint VPN, the VPN clients communicate directly with each other. The operating system used for the clients is Tails Linux. Because Tails Linux always boots from a clean state, a bootstrap software was created to allow easy deployment of the multipoint VPN and random number generator software. Testing results of the random number generator obtained from the tools Ent and rngtest show good performance, favoring the dual PN junction without filtering setting. Throughput tests shown that the throughput of the jitter-based noise generator is significantly lower than the throughput of the PN junction noise generators, diminishing its usefulness as a suitable noise generator. Tests of the bootstrap software shown that the deployment of the multipoint VPN and random number generator software is not only possible, but easy when the software created is used. It is possible to conclude that the scenario proposed is valid and both random number generator and multipoint VPN integrate well.