APIs/Developer Toolkits

Four (4) industry “standard” APIs can be chosen from:

PKCS#11 API implementation - ProtectToolkit C

ProtectToolkit C is a cryptographic provider that enables secure applications to be constructed using the industry standard PKCS#11 API. Additional functionality such as certificate request generation, certificate generation, time stamping and advanced key management is supported by SafeNet Inc's extensions. This software development kit includes application-building tools, libraries, sample source code and a graphical PKCS#11 token browser. It is ported to a wide range of operating systems and consists of a range of both 'C' and Java language callable functions.

Java JCA/JCE provider implementation - ProtectToolkit J

ProtectToolkit J is a Java-based cryptographic provider that allows Java programs to access hardware based, high strength cryptographic services. It enables Java classes to support key storage, authentication and encryption services on the ProtectServer Gold HSM. It is operating system independent and consists of a range of 'Java' classes.

Cryptographic Service Provider (CSP) for Microsoft CryptoAPI - ProtectToolkit M

ProtectToolkit M is SafeNet's implementation of a Microsoft Cryptographic Service Provider (CSP) for Microsoft's CryptoAPI. It encompasses the RSA 'Full' and 'RSA Schannel' CSP provider types to deliver tamper protected hardware key storage and fast RSA processing via the ProtectServer Gold HSM.

Protect Server Gold is certified by the Windows Hardware Quality Lab (WHQL) as designed for use with Windows XP and Windows Server 2003. ProtectToolkit M works seamlessly with Microsoft Certificate Services (PKI) and Internet Information Server (IIS).

PKCS#11 based OpenSSL engine integration

SafeNet's full range of PKCS#11 HSMs can integrate with OpenSSL to operate as both an HSM and SSL Accelerator. The OpenSSL integration is implemented via a PKCS#11-based engine integration increasing the cryptographic processing throughput for the SSL protocol and protecting sensitive cryptographic keys. The Apache Web Server is probably the most popular OpenSSL application that can benefit from the hardware-based security and acceleration of ProtectServer Gold.

EFT command set - ProtectToolkit EFT

ProtectToolkit EFT enables the ProtectServer Gold HSM to perform the application level cryptographic processing required to secure card-based financial transactions initiated at an ATM or EFTPOS terminal or cryptographic and data management operations for Card Issuance.

Software Development Kit - ProtectProcessing

The software development kit functionality within ProtectProcessing allows an unsurpassed level of flexibility and extensibility. It provides the ability to produce your own custom cryptographic application (including completely new algorithms) and allow it to be securely downloaded and executed within the secure confines of a Hardware Security Module - HSM.

In addition, custom extensions to SafeNet off-the-shelf PKCS#11 functionality can be easily developed. Its software emulation functionality streamlines cost and resources enabling developers (either an SafeNet's partner or an end user) to develop and debug custom specific functionality modules (FMs) on a standard PC environment outside of the Hardware Security Module (HSM).

All cryptographic functions are temporarily performed within software libraries in the development server avoiding the need to have a HSM connected to each developer’s machine. Upon completion of development and testing, the implemented custom code can then be easily and securely downloaded to be run within the secure environment of a HSM.

A corresponding Distribution Kit provides all the necessary tools for code signing and certificate management associated with the import of trusted custom code extensions into the HSM.