ProtectToolkit C - Features & Applications

Key Features

• Rich choice of cryptographic algorithms, including 3DES, AES, RSA (up to 4096), Elliptic Curve Cryptography (ECDSA) and SHA-2
• Additional software-only implementation in HSM emulation mode for rapid, low-cost application development.
• Remote client/server operation for exporting PKCS#11 services across a TCP/IP network
• Secure Channel / Trusted Path between API (host library) and HSM (both PCI and network attached modules)
• Software Development Kit including application building tools, libraries, sample source code and graphical PKCS#11 token browser
• Debugging version (logger library) of ProtectToolkit C library supports convenient monitoring and debugging of all PKCS#11 calls
• Support of a host key storage scheme by implementation of an external token (ExtToken) library version of ProtectToolkit C
• Advanced Key Management Utility offering extensive functionality including: Split key entry and creation, Split key backup and restore, Smart card key backup and restore (supporting an n-of-m secret sharing scheme)
• GUI-based Token Browser offers the capability to create, delete, examine, test and modify tokens in a convenient, user friendly process. This is accomplished by graphically showing PKCS#11 tokens along with cryptographic information and services in a hierarchical directory tree. The split window display features a representation of the slots and tokens in the first panel, and service/operations buttons in the other panel. Drag n’ drop and right-click context-based processing support provides highest degree of convenience and efficiency.
• Implementations across a wide range of platforms (including Windows, Solaris, Linux, HP-UP, AIX) including state-of-the art 64-bit OS environments
• Extensive suite of SafeNet Inc. vendor defined extensions for PKI support (PKCS#10 requests, X509v3 certificates, PKCS#12 key and certificate import), Visa 3D-Secure CVV calculation and various key derivations schemes.

Typical Application Integrations

• Access Control and Identity Management Systems
• Authentication and Key Servers (e.g. CAP)
• 3D Secure Internet Payment Access Control Servers (ACS)
• Card Management and Personalisation Systems (EMV, ID/ePassport, mobile telecommunications)
• Branch Network Security
• ATM and POS Terminal Management
• PKI Components such as Certification Authorities (CA), Registration Authorities (RA), Directory Services, OCSP Responders, Time Stamping Servers
• Electronic Commerce Systems, Internet Banking Servers
• Payment Gateways and Merchant Systems
• SSL Cryptographic Accelerator for Secure Web Servers
• Database Encryption
• Internet Service Providers and Application Service Providers
• Electronic Toll Collection Systems
• PayTV, Digital Rights Management Systems
• Online Lotteries, plus Gaming & Gambling Solutions
• Document Signing and Notarization Systems
• Systems for private/confidential document storage, archival and serving