Security Features & Benefits

Tamper-responsive physical security for protection of keys and data

Tamper-resistant casing and tamper-responsive circuitry, ensures that all information stored within the secure memory is cleared in the event of a tamper or break in attempt to the device.

Secure, battery backed memory for key storage

One Megabyte of battery backed secure key storage is available to store and maintain the integrity of symmetric cipher keys (DES, triple DES, AES etc), asymmetric keys (RSA, DSA, ECC, Diffie-Hellman etc), certificates, and sensitive data.

A Battery provides backup power to the tamper sensing electronics when no system power is provided. Any detected tamper event, including battery removal, will immediately result in key memory erasure.

FIPS 140 – 1 level 3 Certification

The FIPS 140-1 Level 3 certification confirms that the ProtectServer External HSM is uniquely qualified to detect attempted physical attacks and perform secure cryptographic processing including correct implementations of several commercially significant and approved cryptographic algorithms.

True Random Number Generator

ProtectServer External allows the generation of truly random cryptographic keys that ensure the required level of entropy essential for the highest levels of security. This is achieved using a hardware based true random number generator meeting ANSI X9.31 requirements and certified to the FIPS 140 standard.

Smart Card key transfer

Cryptographic keys stored on a smart card facilitates rapid configuration of identically-keyed HSMs whilst also minimizing the possibilities of human error. Additionally, the storage of keys on Smart Cards delivers secure key back up in the event of tamper activated memory erasure, upgrade, maintenance, or key transfer from one HSM to another.

Supports Symmetric and Asymmetric/Public Key Algorithms

The support of both symmetric and asymmetric algorithms and associated key management enables diverse functionality within a single device. Please refer to SafeNet Inc’s APIs for specific use and application cryptographic algorithms.