SafeCode - In Detail

The WizardBlue SafeCode program uses a set of advanced and highly efficient group of library routines to generate 'secure' random numbers to 'create' combinations suitable for the UK Government MkIV Manifoil Combination Locks fitted to approved items of security furniture.  These combinations are generated using various algorithms, including FIPS-140-2 and ANSI X9.31/X9.17, GutMann and a low-grade source for less secure situations.

These MKIV Combination locks are also known in the 'trade' as MCLs or to the more established security controller 'Chatwood Milner'.  They offer a system of tumbler wheels which may be set to a user chosen release code (within the limits of the lock).  Operation of these locks is beyond the scope of this web site and you should refer to the operating manual provided with the lock or to your security controllers' own documentation.

So why use SafeCode ?

It is good security practice to change the combinations on your safes at regular intervals or if you believe the current combination may have become 'compromised' in some way.  Any company security controller working with classifications from the UK Government will be fully aware of the scope of safe combination control.

One of the biggest problems facing any user of the safe, when being asked to think of a new combination, is the ability to 'invent' a code that they can remember and is secure.  Most users, to the annoyance of the security controller, tend to use combinations that contain information from an alternative source (e.g. a date in history, or a numerical sequence).  Any user who is faced with changing the combination on a regular basis, will probably have a short list of combination sets which they use in rotation.  This rather defeats the object of changing the combination, if the combination is only ever one of a short set.

Users are very poor at choosing combinations for their safes.  Security controllers who have to 'think' up combinations for users who just say 'Oh, you think of one for me please. I can't think of one', are reducing security because the human brain is not really designed to generate random numbers.  And often 'think' of a new combination based on numbers already issued and in use.

This is where SafeCode from WizardBlue comes in.  The program can be loaded onto user PCs, forcing them to use truly randomly generated numbers.  Or to provide the security controller with a secure source of numbers for users who can't think of a suitable combination.

Experience has shown, that most users, even when presented with a truly random combination, are able to memorise it quite happily.  Proving there is very little need to actually identify a 'memorable' secure sequence.

SafeCode is designed to produce random combinations, using the latest random number algorithms that have been approved by the cryptography community for generation of secure public and private encryption keys.  Using SafeCode correctly will ensure generation of truly random combinations.  Below are a list of program features:

• Secure algorithms for secure combination generation*;
• Combination verification to prevent 'wheel lockups';
• Combination verification to prevent 'easy markers' (i.e. Excessive 5s and 10s are discarded);
• Limit on users generation of combinations until a 'good one' appears**;
• Encrypted dispatch of selected combination to security controller**;
• Generation of 'code table' and key word to simplify user memorization of combination**;
• Simple to use program interface;
• XML Definition of safe and combination rules, allowing other mechanics to be simply added to the list;

So why not try SafeCode today and use it to securely generate combinations for your safes - Download a free evaluation copy from the download area now.

* - Only available in registered copies of the program.
** - Future feature for registered copies of the program.