CryptoServer SDK

Overview Cryptography & Tamper Technology Model Drill Down Pricing Support Downloads

The development environment for the successful realization of your requirements

The SafeGuard® CryptoServer Software Development Kit (SDK) is the professional development environment for all Utimaco Hardware Security Modules. It enables integrators and end-users to create specific applications, e.g. proprietary algorithms, custom key derivation processes or complex protocols that run in the tamper-proof environment of the SafeGuard® CryptoServer. As the SDK provides full access to the existing underlying base firmware, custom firmware modules can be developed in a very short time frame. The functionality contained within these custom modules is controlled entirely by you.

Common development environment for all CryptoServer models.
No additional license fees for runtime environments or per delivered application.
Full control over functionality of user-created firmware.

Some example fields of application

Telecommunication

To adapt the necessary security functionality into the network core infrastructure SafeGuard^® CryptoServer SDK is used to integrate the required protocols and algorithms into the secure boundaries of the hardware security modules. With the flexibility of the SDK and the possibility to benefit from the comprehensive system architecture of the CryptoServer, customers are able to design the security services in line with their overall product architecture.
Banking and finance

Security in banking and finance applications are based on various different kinds of cryptography mechanisms. To optimize the security function needed during a transaction it is necessary to bundle multiple individual cryptograhic calls into a single custom API of the hardware security module.

Today our customers use the SafeGuard^® CryptoServer SDK to optimize the crypto part of the card based payment related protocols. With the SafeGuard^® CryptoServer SDK they are able to follow the various kinds of requirements in the whole value chain in the payment area starting with the pre-personalization schemes down to the authorization system. SafeGuard^® CryptoServer is the foundation to a reliable payment process.
Industry application

SafeGuard^® CryptoServer SDK enables custom cryptographic processes to be securely performed within the secure environment of a CryptoServer HSM rather than on the unprotected host system. Complex security-critical processing components of an application can be moved as a whole to the HSM, using digitally signed code, ensuring no risk of sensitive information ever being exposed in an unprotected environment.
Solution provider

SafeGuard^® CryptoServer SDK enables independent in-house development by our customers or solution providers, avoiding the need to engage third party developers, thereby facilitating full confidentiality of custom security systems and processes. Based on the security concept of SafeGuard^® CryptoServer SDK the development party is in full control of the firmware related key management and code signing.

Based on a wide network of solution providers, who are trained by Utimaco, we are able to provide the best solution for your specific HSM needs.

Cryptography & Tamper Technology

The most common usage of Hardware Security Modules is the tamper-proof preparation and storage of cryptographic keys. Within these mission-critical host applications Hardware Security Modules are included as the standard today.

With the SafeGuard^® CryptoServer product line we are offering different kinds of security and performance levels in terms of tamper technology. With our experience of over 25 years in developing and manufacturing hardware security modules we are able to provide our customers the highest product quality and reliability in terms of tamper technology starting from standard tamper-proof devices up to the highly secure, tamper-responsive HSM SafeGuard^® CryptoServer CS.

Details

Cryptographic Algorithms

SafeGuard^® SecurityServer is available with the following cryptographic algorithms:
- RSA
- DSA, ECDSA
- AES, DES, Triple DES
- AES MAC, Triple DES MAC, Retail MAC
- Hash algorithms SHA-1, SHA-2 family, RIPEMD-160, MD5
- Diffie-Hellman
- Additional algorithms on request
Certification

SafeGuard^® SecurityServer is available with the following certification levels:
- FIPS 140-2 level 3
- FIPS level 4 for „physical security“
- Common Criteria EAL4+
For details please consult the “MODELL DRILL DOWN” section
Random Number Generation

Safeguard SecurityServer comes with the following options:
- Physical random number generation in accordance with AIS 31 (class P2)
- Deterministic random number generation according to FIPS 186-3 or AIS 20 (class K4)
For details please consult the “MODELL DRILL DOWN” section
Tamper Technology

SafeGuard SecurityServer is available with the following tamper features:
- tamper-proof
- tamper-responsive
- secure deletion if mechanical / physical / chemical attacs occur
- secure deletion in case of temperature fluctuation or if the energy supply is outside of defined limits
- possibility of manual deletion
For Details please consult the “MODELL DRILL DOWN” section

Model Based Highlights

Se-Series

The industry standard HSM optimized for common security requirements in a commercial setting

Se LAN

Central point of security for critical applications
Simplifies encryption and signing key management
Ensures business continuity with high availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional DC
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L
SNMP Support
MIB Files are provided on the product CD

Se PCIe

Cost effective HSM for servers
Optimized for cryptographic acceleration in host application
Integrated key management

Hardware Specifications
- Dimensions: length: 167.65 mm (“half” length) height: 111.15 mm (“full” height)
- Operating power 3.3 volt (PCI express bus specification)
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L

CS-Series

High-end tamper responding HSM for advanced hardware security requirements

CS LAN

Central point of highest physical security for ePassport and eID applications
Simplifies key management
High availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional D
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
- Frontpanel display for status and basic administration
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L
SNMP Support
MIB Files are provided on the product CD

CS PCI

Highest security HSM for eID/ePassport server applications
Optimized for cryptographic acceleration in host applications
Integrated key management
Delivers FIPS and Common Criteria compliance

Hardware Specifications
- Dimensions: length: 167 mm (“half” length) height: 107 mm (“full” height) operating power 3.3 and 5.0 volt (PCI bus specification) environmental temperature in operation: +10°C to +35°C / +50°F to +95°F
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L

Pricing

With SafeGuard CryptoServer SDK and the included simulation functionality during the development process, cost and resources are streamlined during the integration of hardware security module technology into a customers product environment or into critical security processes. Following our pricing strategy, Utimaco offers SafeGuard CryptoServer in special bundle packages with all necessary components to start immediately with the development process. The SafeGuard CryptoServer SDK is the common development environment for all CryptoServer Series that gives you the flexibility to choice the target hardware during the design process.

Training and Support

Utimaco provides full training on SafeGuard^® CryptoServer SDK to facilitate the specific in-house development needs on your specific project. With a team of approved developers we support you from the first step in the project, during the implementation phase up to the roll-out.
Don't hesitate to contact us to get more information about the SafeGuard^® CryptoServer SDK:

Tel.: +49 241 1696 200
E-Mail: hsm@utimaco.de

Download SecurityServer Simulator

To support our customer from the first time during the selection processes, utimaco offers a complete functional SafeGuard Security Simulator.
After registration you can download the SafeGuard® SecurityServer Simulator. Included are all API's, libraries, administration tools and documentation of the SecurityServer.

Download Detailed Information

Please contact us for more detailed information or to find out which partner can help you best with your request