Luna PCI

Overview

Luna^® PCI is a family of high-security cryptographic PCI accelerator cards the same cards that power the acclaimed Luna SA Network HSM, which is widely used by major governments, financial institutions, and large enterprises around the world.

Solutions

Luna PCI is designed to protect cryptographic keys and accelerate sensitive cryptographic operations across a wide range of security applications. Luna PCI offers dedicated hardware-based key management to protect sensitive cryptographic keys from attack. The high-security hardware design ensures the integrity and protection of encryption keys throughout their life cycle. All digital signing and verification operations are performed within the HSM to increase performance and maintain security. Luna PCI HSMs provide hardware-secured key generation, storage, secure key backup, and accelerated encryption in a range of models and configurations offering a wide selection of security, performance, and operational capabilities.

Luna PCI 7000

Overview

The Luna PCI 7000 offers high-performance cryptographic processing at a rate of 7,000 asymmetric 1024-bit RSA operations per second-more than twice as fast as the nearest competitor-and it can be embedded directly in an application server for an easy-to-integrate and cost efficient security solution.

The Luna PCI 7000 is the latest addition to SafeNet's family of high-security cryptographic HSMs from network attached to PCI accelerator cards used by governments, financial institutions and large enterprises around the world to protect security-critical applications.

Like all SafeNet HSMs, the Luna PCI 7000 provides reliable protection for applications and information assets to ensure regulatory compliance and reduce the risk of liability. It is securely packaged to meet the most stringent requirements for tamper and intrusion resistance. It is currently under review for FIPS 140-2 validation at both Level 2 and Level 3, and Common Criteria at EAL 4+. For management and security purposes, encryption keys are stored on the Luna PCI 7000 card throughout its life cycle.

Additionally, the Luna PCI 7000 offers strong two-factor authentication and multiple administrator roles to prevent unauthorized access to sensitive cryptographic material. It also offers Trusted Path Authentication using the Luna PED (PIN Entry Device), which is an integrated handheld authentication console that does not rely on commercial keyboards or displays for administrator PIN code entry.

The Luna PCI 7000's plug and play support for Microsoft Windows platforms ensures seamless deployment to a wide range of security applications such as IIS, ISA and RMS Servers. Likewise, its full cryptographic application program interface support makes integration quick and easy.

For developers interested in the Luna PCI 7000, a Luna Toolkit is available, which makes adding secure, hardware-based cryptographic processing to custom applications simple.

*The Luna PCI 3000 and Luna PCI 7000 are currently under FIPS and Common Criteria review

Product Highlights

• The Fastest, High-Performance Cryptographic Processor
  Luna PCI models offers a range of performance levels to meet all application needs, from 1200 to 7000 asymmetric 1024-bit RSA operations per second. More than twice as fast as the nearest competitor
• Common criteria EAL 4+
  For government and other industry mandates requiring one of the highest security features in an HSM, the Luna SA is designed to meet CC EAL 4+  security requirements
• The Most Secure- FIPS 140-2 Level 3, and FIPS 201/Global Specification Platform/PIV Validated
  Luna PCI 1200 is validated at both FIPS 140-2 level 2 and level 3 depending on configuration and model selected
• True Trusted Path Authentication
  Luna PCI offers strong two-factor authentication for FIPS level 3 using the well known Luna PED (PIN Entry Device), an integrated handheld authentication console that does not rely on commercial keyboards or displays for administrating PIN code entry­; creating a True Trusted Path for authentication
• Standard API's
  Luna PCI supports PKCS#11, Microsoft CryptoAPI, Java JCE/JCA, and Open SSL Cryptographic APIs to simplify development and speed application deployment.
• Strong Encryption
  Luna PCI supports a broad range of cryptographic processing and key exchange algorithms including RSA (up to 4096), SHA-256/512, AES, 3DES, and many more.