$c34au5fjnb9

Kryptus kNET is a FIPS-validated network-attached Hardware Security Module (HSM) that secures critical applications by protecting keys and sensitive software with top tier performance.
                   

The native KMIP API enables direct TLS connection (no drivers required), being a perfect fit for IoT, Cloud, and Blockchain applications.

  • People

    Performance

    Up to 5.000 RSA 2048 TPS

  • Files

    Certification

    FIPS 140-2 Level 3+ (EFP/EFT) certificated
    PCI Certification

  • Email

    Secure Code Execution

    The kNET enables customers to run their code in a tamper-proof environment

  • Metrics

    Virtual HSMs

    Real insulation in multi-tenant scenarios

  • $8fcws5bpa0p

    High Availability

    Hot-Swap Dual power supply and Dual Gigabit Ethernet, load Balancing

  • $vyj80s137yj

    KMIP Protocol

    Full native KMIP support (v1.2 and v1.3 - no drivers required)

 

Easy to maintain.

Always Available.

                                      

 

 

The kNET comes equiped with dual Hot-Swap redundant power supply and dual redundant Gigabit Ethernet ports.

 

Coolers are easy to replace with frontal access, and no need to open the casing.

Technical Specification

                       

  •  

       Capabilities

        Payment System Module
        Module for XML signatures
        Multi-tenant – Up to 50 Virtual HSMs
        TLS 1.2 Encrypted Channel
        Load balancing and High Availability support
        Remote management via GUI (Windows (32 and 64 bits) XP / 7/8/10, Linux      (32 and 64 bits) included RedHat, OS X)
        Smartcard, USB token + PIN, User + Password and OTP (TOTP and HOTP)
        Double authentication factor
        authentication modes available
        Software simulator for development and evaluation
        Secure execution of customer code
        SNMPv3 Monitoring (with traps)



        Physical Specification

        19” 1U form factor
        1 x USB ports (Smart-Card, Token ,and external PIN pad)
        Dual hot-swap power supply (100~240V)
        Front-panel Dual Gigabit Ethernet Interfaces
        Front-panel LCD Display
        Front-panel Serial Console Port
        Tamper-evident seals on external enclosure
        Tamper-detection of external enclosure opening

  •    Cryptography

     

        Asymmetric
        RSA (up to 8192 bits), DSA, ECDSA (including Brainpool curves)
        EdDSA (Curve25519, Ed448-Goldilocks e E-521)
        Symmetric
        AES (ECB, CBC, CFB, OFB, CTR, GCM, CCM, XTS), HMAC
        Hash
        SHA-1, SHA-2 (SHA-224, SHA-256, SHA-384 SHA-512), MD5, RIPEMD-160

     

        Available APIs

          Native KMIP Support – Versions 1.2 and 1.3 – No drivers 
    needed
        PKCS#11
        Java Cryptography Extension (JCE)
        Microsoft CNG / CAPI
        Libs available in Java, C++(integrated and compatible with Microsoft Visual C version 6, JavaScript and Python

        Performance

        Up to 4.000 RSA 2048 Transactions per Second
        Up to 3GB of storage available for Objects

        Certification and Compliance

        FIPS 140-2 level 3+ (EFP/EFT) certificated

        ICP-Brasil MCT7 NSH3

        CC EAL4+*

        PCI 

        UL/FCC **




            *Under Certification, **Intended Certification

Contact us

fale.conosco@kryptus.com
+55 (19) 3112-5000
www.kryptus.com