APIs/Developer Toolkits

SafeNet Inc. delivers one of the most comprehensive portfolios of cryptographic APIs in the market place. They enable users to seamlessly integrate cryptography and HSMs into a large range of host-based pre-integrated third-party solutions, or custom applications developed by the client.

Four (4) industry "standard" APIs can be chosen from:

PKCS#11 API implementation - ProtectToolkit C

ProtectToolkit C is a cryptographic provider that enables secure applications to be constructed using the industry standard PKCS#11 API. Additional functionality such as certificate request generation, certificate generation, time stamping and advanced key management is supported by SafeNet Inc’s extensions. This software development kit includes application-building tools, libraries, sample source code and a graphical PKCS#11 token browser. It is ported to a wide range of operating systems and consists of a range of both 'C' and Java language callable functions.

Java JCA/JCE provider implementation - ProtectToolkit J

ProtectToolkit J is a Java-based cryptographic provider that allows Java programs to access hardware based, high strength cryptographic services. It enables Java classes to support key storage, authentication and encryption services on the ProtectServer External. It is operating system independent and consists of a range of 'Java' classes.

Cryptographic Service Provider (CSP) for Microsoft CryptoAPI - ProtectToolkit M

ProtectToolkit M is SafeNet's implementation of a Microsoft Cryptographic Service Provider (CSP) for Microsoft’s CryptoAPI. It encompasses the RSA ‘Full’’ and ‘RSA Schannel’ CSP provider types to deliver tamper protected hardware key storage and fast RSA processing via ProtectServer External HSM.

ProtectServer External is certified by the Windows Hardware Quality Lab (WHQL) as designed for use with Windows XP and Server 2003. ProtectToolkit M works seamlessly with Microsoft Certificate Services (PKI) and Internet Information Server (IIS).

PKCS#11 based OpenSSL engine integration

SafeNet's full range of PKCS#11 HSMs can integrate with OpenSSL to operate as both an HSM and SSL Accelerator. The OpenSSL integration is implemented via a PKCS#11-based engine integration increasing the cryptographic processing throughput for the SSL protocol and protecting sensitive cryptographic keys. The Apache Web Server is probably the most popular OpenSSL application that can benefit from the hardware-based security and acceleration of ProtectServer External.

Software Development Kit - ProtectProcessing Orange

The software development kit functionality within ProtectProcessing Orange allows an unsurpassed level of flexibility and extensibility. It provides the ability to produce your own custom cryptographic applications (including completely new algorithms) from scratch, or develop custom extensions to SafeNet's off-the-shelf PKCS#11 functionality by patching the standard routines that can be executed within the secure confines of a Hardware Security Module - HSM.

Its software emulation functionality streamlines cost and resources enabling developers (either an SafeNet’s partner or an end user) to develop and debug custom specific functionality modules (FMs) on a standard PC environment outside of the HSM.

All cryptographic functions are temporarily performed within software libraries in the development server avoiding the need to have a HSM connected to each developer’s machine. Upon completion of development and testing, the implemented custom code can then be easily and securely downloaded to be run within the secure environment of a HSM.

No prior embedded system experience is required, only knowledge of the industry standard ANSI based C language and its ‘C’ run-time library.