Import clear componet from

8/11/2017 8:33:17 AM
Gravatar
Total Posts 3

Import clear componet from

 

I'm planning to use NCryptoki. I have 3 clear components from which I need to create ZMK under LMK.   Is this possible to achieve this using NCryptoki. As I am new in this it will be great help if you can let us know. Objective is to have ZPK encryption for PIN Block. Thanks in advance.

8/11/2017 10:26:18 AM
Gravatar
Total Posts 296
Ugo Chirico http://www.ugochirico.com

Re: Import clear componet from

Yes, you can use NCryptoki, together with your HSM, to manage ZMK under LMK in order to have a ZPK for PIN encryption/decryption.

NCryptoki allows you to manage easily your HSM in a .NET application (or JCryptoki for a Java application if you are using Java) by using the PKCS#11 module supplied by your HSM vendor.

NCryptoki (and PKCS#11) suppliess you the primitives to implement your key management process, i.e. you should implement your logic behind ZMK, LMK and ZPK by using the high level PKCS#11 functions supplied by NCryptoki. 

For example, NCryptoki (and PKCS#11) supplies functions to create and store any kind of simmetric keys such as AES, DES, 3DES, etc., for ZMK,LMK and ZPK, to wrap and unwrap low level keys, such as ZPK, by using ZMK or LMK.   

I suggest to design your flows and processes to manage keys end then to map your process on the primitives supplied by NCryptoki and PKCS#11. 

If you need we may help you on your project.

 

8/13/2017 3:08:32 PM
Gravatar
Total Posts 3

Re: Import clear componet from

Hi Ugo,

    Thanks for quick response.  As you said "together with your HSM". I am not planning to use HSM.  Can I use NCryptoki as a replacement for HSM. Please guide here as I am little confused about HSM

Thanks.

8/14/2017 9:21:57 AM
Gravatar
Total Posts 296
Ugo Chirico http://www.ugochirico.com

Re: Import clear componet from

NCryptoki needs an HSM, a smart card or a cryptographic token compliant with PKCS#11 specifications.

You may use our virtual HSM, VirtualCryptoki, that you find in the download section: http://www.ncryptoki.com/download.aspx

VirtualCryptoki is a software HSM that can be used as replacement for a real HSM. It is PKCS#11 compliant and supplies the same functions as a real HSM.

8/16/2017 3:45:52 AM
Gravatar
Total Posts 3

Re: Import clear componet from

 Can I use this virtual HSM, VirtualCryptoki, in production for 5000 transactions a day.  Thanks!

 

8/17/2017 9:11:06 PM
Gravatar
Total Posts 296
Ugo Chirico http://www.ugochirico.com

Re: Import clear componet from

Our free Virtual HSM (the one that you can download in our download page) doesn't support 5000 transactions per day.

We have another, more robust, virtual (software) HSM that allows you to manage more transactions per second, i.e. more than 86400 transactions per day.

This software HSM is not free. I'll send you our offer for that HSM with all details to your email (the one you used to register to this forum).