A containerized platform approach for multiple cryptographic applications
The u.trust Converged HSM CSAR is a multi-tenant HSM platform that allows any organization to scale up and down as needed. Running either 16 or 31 isolated containers, it allows multiple truly independent and fully isolated containerized HAM instances to run within a FIPS 140-2 Level 3 certified HSM platform. Each instance is opaque, meaning that access to administrative and cryptographic functions is limited to the user, ensuring the required level of confidentiality for their sensitive data and keys.
It is easy to manage and gives end users complete control over their keys, with best-in-class performance and auditability.
Product Type:
PlatformSupported Firmwares:
Key Benefits
Multi-tenancy with up to 31 isolated containers
Choose between 16 or 31 containers to run different fully isolated firmware stacks simultaneously. The complete separation of each stack ensures true isolation and multi-tenancy, resulting in superior quality of service.
Convergence for payment and general purpose
Combine certified payment, custom firmware, and general purpose use on the same platform for flexible, scalable, and easy use case implementation.
Scaling on demand
Aggregate multiple HSM instances on the u.trust Converged HSM CSAR and shift instances based on business needs.
Certification for a variety of use cases
The firmware stacks can address multiple use cases and compliance mandates such as PCI-compliant payment transaction processing, FIPS and Common Criteria (CC) compliant general purpose use cases, blockchain applications, and many more.
Crypto agile and PQC-ready
Designed with crypto-agility in mind, the HSMs are in-field upgradable with PQC algorithms such as CRYSTALS-Kyber, CRYSTALS-Dilithium, LMS, HSS, XMSS, and XMSS-MT.
Software Development Kit
Enables custom firmware development based on algorithms and functions of choice
Details
A containerized platform approach for multiple cryptographic applications
 |  |
The u.trust Converged HSM CSAR is a multi-tenant HSM platform that allows any organization to scale up and down as needed. Running either 16 or 31 isolated containers, it allows multiple truly independent and fully isolated containerized HAM instances to run within a FIPS 140-2 Level 3 certified HSM platform. Each instance is opaque, meaning that access to administrative and cryptographic functions is limited to the user, ensuring the required level of confidentiality for their sensitive data and keys. It is easy to manage and gives end users complete control over their keys, with best-in-class performance and auditability.
Cryptographic algorithms
- RSA, DSA, ECDSA with NIST and Brainpool curves, EdDSA
- DH, ECDH with NIST, Brainpool and Montgomery curves
- Edwards curves Ed25519 and Ed448
- AES, Triple-DES, DES
- MAC, CMAC, HMAC
- SHA-1, SHA-2, SHA-3, RIPEMD
- Hash-based deterministic random number generator (DRG.4 acc. AIS 31)
- True random number generator (PTG.2 acc. AIS 31)
- Chinese Algorithms
- All algorithms included in the product price
Cryptographic Interfaces (APIs)
- PKCS #11
- Java Cryptography Extension (JCE)
- Microsoft Crypto API (CSP), Cryptography Next Generation (CNG) and SQL
- Extensible Key Management (SQLEKM)
- OpenSSL
- Utimaco‘s comprehensive Cryptographic eXtended services Interface (CXI)
