CRYPTO PRODUCTS PORTFOLIO
The HSM for the brazilian ROOT CA
CRYPTO PRODUCTS PORTFOLIO
THE HSM FOR THE BRAZILIAN ROOT CA
Encrypted Security Module with 100% domestic development. It has an ICP-Brasil certificate MCT7 NSH3 and NSF2 (unique in the market), being the HSM of choice of the Brazilian AC-Raiz
ASI-HSM was the first ITI-certified HSM for use in ICP-Brazil, and currently is the only one to have maximum confidence level certification of approval (NHS3) and maximum level of physical security (NSF2, FIPS 140-2 equivalent level 4), which makes the equipment ideal for use in ACs of ICP-Brazil.
ASI-HSM enables the creation and storage of cryptographic keys in a secure environment, protecting them against logical and physical attacks. The SE (Secure Execution) version also allows secure storage and execution of user applications within the device.
HSM management is performed through an intuitive graphical Java interface and enables the execution of tasks such as key and user creation, log management and backup, among others The use of encryptic keys can be performed by any application compatible with one of the industry standard APIs for cryptographic devices, such as PKCS # 11, Microsoft CAPI, JCA, and OpenSSL.
It is also the official HSM of the ICP-Edu program of the RNP (National Education and Research Network), being used by the Certification Authorities of the main universities of the country, such as UNICAMP, UFSC, UFMG, UFF, UFRJ, UFRGS and many others.
ACs da ICP-Brasil
Critical ACs (Defense, Critical Infrastructures)
Code protection (application shipping)
Secrecy and digital signatures
HSM general purpose
First HSM approved at ICPBrasil with the new Brainpool elliptical curves
ECDSA (NIST FIPS PUB 186-3), Brainpool (only approved in ICP-Brazil)
SHA-1, SHA-256, SHA-512 (NIST FIPS PUB 180-2)
Keys can be imported or generated internally
Supported operating systems
Real Time Clock (RTC)
Random Number Generator
Weight: 5.2 kg • Power supply: 100~240V AC, 50/60Hz
Interfaces: USB, Smart card reader, LCD display, Ethernet
Kryptus kNET é um Módulo de segurança de hardware (HSM) com certificação FIPS* e ICP-Brasil* que protege aplicativos críticos protegendo chaves e softwares sensíveis com desempenho de nível superior.
O CommGuard possui módulo criptográfico em hardware com mecanismos “anti-tamper” que permite a customização de algoritmos criptográficos. Desempenho de até 1+ Gbps e interfaces até 10 Gbps.
Token USB de alto desempenho com funcionalidades de armazenagem segura de dados e gestão de identidades.
Solução de gerenciamento de identidades privilegiadas que armazena, gerencia e monitora senhas de alto privilégio de seus ativos de TI.