ProtectToolkit J - Cryptographic API
ProtectToolKit J is a JCA/JCE Cryptographic Service Provider (CSP) supplying a complete set of cryptographic operations to
allow Java programs to perform strong authentication, encryption and key management.
ProtectToolKit J enables users to:
- Seamlessly integrate Hardware Security Modules - HSMs with the leading software applications of the most important
global and regional software vendors that implement security solutions to JCA/JCE standards
- Extend Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE) based applications with the high
security and performance delivered by an SafeNet Inc's FIPS 140 certified HSM
- Apply JCA/JCE cryptographic functions to your applications and have these requests passed through the physical and
logical security of an SafeNet's HSM, rather than the host processor.
- Securely generate, store and use cryptographic keys within the secure environment of a FIPS 140 certified HSM,
avoiding the risk of ever exposing sensitive keys in clear text in working memory when performing cryptographic operations
- Speed-up CPU intensive cryptographic operations that typically impede server performance. ProtectToolKit J enables
cryptographic processing to be off-loaded to dedicated HSMs removing processing bottlenecks and relieving the server to
concentrate on other critical application processing tasks
- Choose from a variety of HSM form factors (PCI card or external, network-attached module) and performance options.
Seamless out-of-the-box integration of PKCS#11 functionality
As a plug-in crypto provider, ProtectToolKit C seamlessly integrates with the leading software applications of the most
important global and regional software vendors that implement security solutions to PKCS#11 standards. SafeNet
constantly monitors, tests and upgrades its PKCS#11 providers to ensure interoperability, integration and compatibility
with the ever-growing suite of software applications.
Seamless out-of-the-box integration
As a plug-in crypto provider, ProtectToolKit J seamlessly connects hardware-based physical and logical security of an
SafeNet's HSM with standard-compliant Java applications.
Java based key management and device management utilities simplify the process of integration and deployment into
production systems. SafeNet constantly monitors, tests and upgrades its JCA/JCE provider and ensures its
interoperability and integration with the ever-growing suite of Java applications to ensure seamless compatibility with
market-dominant solutions.
Accelerate development of customized applications
The Software Development Kit (SDK) delivered with ProtectToolKit J includes the software provider libraries, interfaces
and reference documentation required to compile and link message authentication, encryption, message digests, key store
and key management functionality within a Java JCA/JCE application. In addition, sample programs with Java source code
and build instructions assist application development.
HSM software emulation functionality significantly reduces the development system setup time. It enables the initial
development and testing using the software-only variant of ProtectToolKit J. This delays the need to install the HSM into
the development environment until final testing phase, after the application is debugged and fully tested.
Enhanced system security and processing performance
ProtectToolKit J enables Java application vendors to achieve levels of physical and logical protection to cryptographic
keys and operations that far surpass the protection delivered by software-based cryptographic systems.
Built around the java.security package (and its sub packages), ProtectToolKit J enables application programmers to call
cryptographic functions in the JCA and JCE security framework, and have the cryptographic processing performed by an
SafeNet Hardware Security Module - HSM.
A ProtectToolKit J extension to the ‘Java KeyStore’ class, called the WrappingKeyStore, extends the functionality and
security of JCA/JCE by enabling encryption and decryption within the HSM. This removes the need to expose keys outside
of the protected HSM environment when it is necessary to exchange them with another party.
In addition, the HSM offloads all CPU intensive cryptographic processing from the host server, thereby increasing overall
system performance by removing host-based bottlenecks and increasing the processing rate of server requests.
HSM Platform Options relevant to ProtectToolKit J
Contact Us 
