Apply Cryptographic Processes for Qualified Signatures and Seals and classified environments
The CryptoServer General Purpose HSM is designed for eIDAS-compliant and classified use cases. This makes it the ideal Hardware Security Module for governments, public sector, and organizations that need to fulfill certain compliance regulations, such as Trust Service Providers or critical infrastructure providers.
The CryptoServer General Purpose HSM offers two firmware options:
- CC Protect is specifically designed and certified for the creation of eIDAS-compliant qualified signatures and seals, remote signing and the issuing of qualified certificates. It is Common Criteria-certified according to the eIDAS Protection Profile (PP) EN 419 221-5 “Cryptographic Module for Trust Services”.
- VS-NfD Protect is approved by the German Federal Office for Information Security (BSI) and can be applied in classified environments according to VS-NfD, RESTREINT UE/EU RESTRICTED and NATO RESTRICTED.
Key Features
Qualified Signature and Seal Creation Device (QSCD)
CC Protect on CryptoServer General Purpose HSM can be used as an eIDAS certified Qualified Signature and Seal Creation Device.
CC-Certified
Common Criteria-certified according to the eIDAS Protection Profile (PP) EN 419 221-5 “Cryptographic Module for Trust Services”
Trust Anchor for classified data
CryptoServer General Purpose HSM running VS-NfD Protect is the only BSI-approved VS-NfD HSM on the market, allowing the backup and processing of classified data according to VS-NfD, RESTREINT UE/EU RESTRICTED and NATO RESTRICTED.
Simulator included
Test CryptoSever firmware with our free fully functional simulator for evaluation and integration testing before deployment.
Details
Cryptographic algorithms
- RSA, ECDSA with NIST and Brainpool curves
- ECDH with NIST and Brainpool curves
- AES
- CMAC, HMAC
- SHA-2, SHA-3
- Hash-based deterministic random number generator (DRG.4 acc. AIS 31)
- True random number generator (PTG.2 acc. AIS 31
Cryptographic Interfaces (APIs)
- PKCS #11
- Cryptography Next Generation (CNG)
- Key authorization API and tool
- Utimaco‘s comprehensive Cryptographic eXtended services Interface (CXI)
