Kryptus HSM: innovative technical additions to Brazilian HSM for inclusion in national and international markets

• Grant number: 15/50579-0
• Support Opportunities: Research Grants - Innovative Research in Small Business - PIPE
• Start date: October 01, 2016
• End date: March 31, 2018
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: FINEP - PIPE/PAPPE Grant
• Principal Investigator: Roberto Alves Gallo Filho
• Grantee: Roberto Alves Gallo Filho
• Company: Kryptus Segurança da Informação Ltda
• City: Campinas

Abstract

Security issues regarding cryptographic keys life cycle and cryptographic protection of sensitive data are not new. Impacts of these issues are increasing on a daily basis, and are reflected in many sectors: industrial espionage, bank frauds and cyber warfare are some examples. The reality is that, despite the many answers cryptography has to security issues, the achievement of practical and reliable cryptosystems is aggressively difficult - side channel attacks, security model violations, implementation defects and attackers with physical access are a few factors worth noticing. For these reasons, a few decades ago, the concept of hardware security modules (HSMs) arose - appliances that are capable of providing secure cryptographic services even in the presence of motivated and resourceful adversaries. Such class of equipment have been successful in achieving its goals of providing cryptographic protection, and it is the choice of many mission-critical sectors, such as digital certification, financial services, cloud providers, and Defence. However, despite being critical and having multiple applications, HSM platforms technology is mastered by less than 10 companies in the world, mainly from North America. This project aims to develop an HSM that meets market demands, called ASI-HSM AHX5. (AU)