Safeguard Toolkit

   The Development Toolkit for Fast and Easy Security Integration
SafeGuard Toolkit is an indispensable set of security tools for integrators and application builders. Digital signatures, symmetric or asymmetric encryption, strong authentication and other security functionality can be easily integrated into existing applications in a flexible way. Every software developer can use SafeGuard Toolkit, even if they have limited security knowledge.
 

The Challenge
   Almost every day, you can find press articles describing certain security leaks in certain e-business environments. Imagine what can happen if stolen data is misused by a criminal organization. It is clear that modern e-business or data exchange applications must fulfill at least elementary security mechanisms to guarantee the end-user’s confidentiality and data integrity.
SafeGuard Toolkit can be used to close those security holes.

Typical application areas, where SafeGuard Toolkit can be used:
        • workflow management systems
        • archiving applications
        • ERP systems
        • document management software
        • EDI applications
        • web applications
        • e-banking
        • any other application where data security or authentication is important
 

Key Elements
   The modular structure of the SafeGuard Toolkit provides a flexible platform to enable an ICT system into secure electronic communication.
 

Open Standards
   Strict adherence to open standards, such as X.509, CRL, PKCS, OCSP and LDAP forms the basis for seamless interoperability with third-party PKI and PKA (PKI enabled Applications) solutions.
 

The Product
   The architecture of the SafeGuard Toolkit is designed in such a modular way that extensibility can be easily achieved.

Following major modules can be distinguished:

Device Service Provider
    The Device Service Provider or DSP is a layer in the toolkit to manage several certificate and key carriers (smart cards types, Hardware Security Modules or HSMs, software tokens, etc.): The basic cryptographic algorithms supported by the devices can be accessed via the DSP.

Protocol Service Provider
    The Protocol Service Provider (PSP) typically handles with communication protocols like PKCS#7, S/MIME and Mail Trust.

APIs
   Programmers can access the toolkit via a broad range of APIs, each designed for a specific purpose. Depending on the requirements, the customer can use low-level or high-level APIs.

Directory Service Provider
    All applications that are using public key cryptography can use the Directory Service Provider or DRP. Certificates can be accessed in an X.500 database via LDAP or ODBC.

Specifications

Asymmetrical Algorithms
        • RSA 512-4096 bit
        • Symmetrical Algorithms
        • AES 128, 192, 256 bit
        • 3-DES 112, 168 bit,
        • IDEA 128 bit, DES 56 bit,
        • SQUARE 128 bit, SAFER 64 bit,
        • RC2 40-128 bit
        • Hashing Algorithms
        • RIPEMD-160, SHA-1, MD-2, MDC-2
        • MD-5
        • DES-MAC

Compression Algorithms
        • LZSS and ZLIB
        • Certificates
        • X.509v3 certificates (incl. extensions)
        • CRLv2 (incl. extensions)

Protocols
        • S/MIMEv2 and S/MIMEv3.1 (based on RSA),
        • PKCS#7, MailTrusT v1.1, LDAPv2 and
        • LDAPv3, OCSPv1, Time Stamping, SSL

APIs
        • CMT-PRI: Crypto primitives
        • GSS-API: Authentication
        • Messaging API: Messaging
        • STD-API: File handling, logging, ...
        • DiSP-API: Certificate management
        • DRP API: Database and directory handling

Supported Operating Systems
        • Microsoft Windows 95
        • Microsoft Windows 98
        • Microsoft Windows Me
        • Microsoft Windows NT 3.5 and 4.0
        • Microsoft Windows 2000
        • Microsoft Windows XP
        • Sun Solaris 7.x
        • Linux

    The toolkit can be easily ported to other UNIX operating systems on customer request, such as HP-UX, IBM AIX.

Supported HSMs
        • Utimaco Safeware CryptoServer 2000
        • IBM 4758 cryptographic boards
        • Others on request*
        • Supported Smartcards
        • PKCS#11-based smartcards and tokens*
        • Utimaco Safeware Smartcards via CardMan
        • API (SafeGuard Smartcard Provider)
        • SafeGuard Toolkit Add-ons

    A Java wrapper is available for the majority of key management and messaging functionality.