Script new key derivation mechanisms, use-case-specific data processing functions and custom extensions, and develop applications with massively reduced effort and overhead.
Utimaco CryptoScript SDK – Fast, Intuitive, Powerful, Secure
CryptoScript lets you run your applications inside the secure perimeter of a Utimaco CryptoServer HSM even when operating in FIPS mode (evaluation in preparation).
- Run multiple applications in virtual HSMs
- Firewalling, separate databases and roles allow for multi-tenancy.
- When easy-to-use customization options are required, such as e. g. for Industrial IoT, Automotive, Utilities or Payment applications, CryptoScript is your readily available solution.
Custom Crypto Application Design
Secure
- Managed language, security monitor
- Intermediate results remain in HSM
Efficient
- Great performance, memory-efficient
- Virtual HSMs for multi-tenancy
- Easy to use
- Optimized for crypto applications
- Automatic garbage collection
Versatile
- Cryptography, audit logs, and more
Functionality
- Full-featured crypto library
- Support for long-number arithmetic
- Internal and external key storage
- Optional smartcard-based two-factor authentication
- M-of-N quorum authentication
High Performance
- Efficient runtime environment
- Optimized firmware implementation
- Support for onboard HW accelerator
- Intermediate results remain in HSM
Multi-Tenancy
- Multiple virtual HSMs
- Separate databases (optional)
- Database quota
- Separation of backup data
- Role-based access control
Libraries
- CXI (Cryptographic eXtended services Interface)
- Long-number arithmetic
- Strings, tables, arrays, lists, records, …
- Data packing and unpacking
- Command handling, logging, and authentication
Secure Development
- CryptoScript compiler runs inside HSM
- Efficient, untainted code
- Low memory footprint
- CryptoScript host tool
- Load CryptoScript signature key
- Sign CryptoScript firmware modules
- Load, run, stop, and delete modules
- Backup and restore private database
Secure Runtime Environment
- Secure managed memory
- Signed code
- Private database (optional)
- Firewalled virtual HSMs
Easy-to-Use Programming Language
- Derived from Lua
- Rich set of data types
- Automatic garbage collection
Execution Platforms
