SecretAgent®

  • Overview
  • Acclaim
  • Details
  • Standards
  • Related Info

Overview

SecretAgent is the world's leading file encryption and digital signature utility. Interoperable across a wide range of platforms (Windows, Linux, Mac OS X, and most UNIX systems), it's the perfect solution for your data-at-rest or data-in-transit security requirements, regardless of the size of your organization.

Employing the latest cryptographic standards, SecretAgent ensures the confidentiality, integrity, and authenticity of your data.

NEW! SecretAgent supports S/MIMEv3 CMS (RFC3852) on most platforms. Release 5.8 adds automated key history management and an integrated OCSP client. Release 5.9 adds support for DAS.

SecretAgent CD-ROM Package

SecretAgent is a software utility that lets you sign and encrypt your files and e-mail messages. The following functions are provided:

 

encrypt, or encrypt & sign
decrypt, or decrypt & validate
sign / validate
securely erase
hash

for confidentiality
      (with optional sender authentication)
for sender authentication
for confidentiality
for data integrity checking (message authentication)

     
OMB graphic ISC products can satisfy
OMB Memorandum M-06-16 security requirements!

Critical Acclaim

ISC's DAS interoperability demonstration project (IT 03.09) for CWID 2006 has been judged a "top performing technical solution" and is listed among the top twelve "standout" projects in the final report.
 
DISA logo According to the U.S. Defense Information Systems Agency (DISA), SecretAgent "is the only known product approved by NSA for use in DOD classified environments, that allows a migration path to the DMS with Fortezza encryption cards." (Commerce Business Daily, Jan. 15, 1997.)
 
NZ JSIS logo SecretAgent is currently the only product recognized by the New Zealand Ministry of Justice as meeting their requirements for file encryption. (See section 4.6 of Data Encryption For the Exchange of Files Using ftp or Physical Media, Version 1.0 and section 5 of Agreed Policies and Framework for the Encryption of Data.)
 
SC Magazine logo In their review of SecretAgent, SC Magazine arrived at this verdict: "This solution will sit happily on a stand-alone machine or network and provides the means to secure data using either PKI or self-signed transactions. The installation is easy and the solution proved to be both intuitive and user-friendly." It was awarded 5 out of 5 stars for ease of use, performance, and value.
 
WAEA logo A WAEA Technical Specification says that "SecretAgent, the most popular encryption tool for airline entertainment systems, is used primarily for VOD [video-on-demand ] or scheduled viewing systems..."


†Strict confidentiality agreements have prohibited us from publicly identifying our largest customers for more than a decade, putting us at a significant disadvantage with respect to our competition. However, since the references to some of our business relationships quoted above have appeared elsewhere on the Internet, we feel that citing them here for advertising purposes is not unreasonable.

Product Details

Interoperable versions of SecretAgent are available on several platforms. Click on the link below for more information and some screen shots:

SecretAgent for Windows
SecretAgent for Mac OS X
SecretAgent Mobile for PocketPC 2002/2003
SecretAgent/Java for UNIX

Feature Comparison Summary for SecretAgent on various platforms (updated 3/31/08)

Command line executable and linkable library versions of SecretAgent are also available on all supported platforms.

X.509 Support

SecretAgent can generate standard PKCS#10 certificate requests (for use with an existing enterprise PKI) or X.509 version 3 self-signed certificates (for operation without a formal PKI). Encryption uses standard X.509 certificates and CRLs. We have performed interoperability testing with all major Certificate Authorities and PKI vendors (e.g., Baltimore, Entrust, Verisign, XCert).

In October 2002, SecretAgent 5.6 passed interoperability testing at DISA's JITC PKI Certification Lab at Ft. Huachuca and has received formal certification of full compliance with the DoD PKI. (JITC's Interoperability Test Summary.)

Standards Compliance

SecretAgent fully satisfies NIST FIPS 140-2 and NSTISSP No. 11 acquisition requirements for COTS security and information assurance products. The product is available to all government agencies through a DoD/OMB/GSA blank purchase agreement (BPA) recently awarded to our reseller Carahsoft Technology Corp.

More detailed information about SecretAgent 5's compliance with relevant federal and industry cryptographic standards is available here. Some information on the use of SecretAgent to achieve HIPAA compliance is here.

NIST FIPS 140-1 logo
DISA JITC logo
CNSS logo