CRYPT2Pay™ Series Technical Features

Tamper Resistant Design

CRYPT2Pay™ contains a Motorola MPC860 microprocessor, a Cryptographic Device to perform DES, Triple DES & public key encryption, hashing algorithms and a random number generator. It also has protective shields, sensors and control circuitry to react against attacks (eg opening, mechanical and chemical penetration, movement, voltage variation, radiation exposure and temperature manipulation, etc.,) consistent with Common Criteria requirements. If the tamper sensors are triggered or if the environmental operational ranges are no longer met, the HSM zeroes all secrets stored in its memory and is rendered inoperable.

A software security feature contributes also to the overall security of the system: Authentication and integrity controls are performed on the software residing on the HSM, first before shipment and then at each reboot; controls must be consistent to allow the HSM to proceed.

Encryption Functions

Bull Banking HSM provides:

• Symmetric DES and two keys Triple DES algorithms,
• RSA algorithms with keys up to 2048 bits,
• Generation of symmetric keys, and RSA key pairs,
• DES & Triple DES based data confidentiality,
• DES & Triple DES based message integrity (MAC calculation/verification),
• SHA-1 message hashing functions,
• RSA based DES key distribution,
• RSA based signature generation/verification

Performance

CRYPT2Pay™ is available at different speed levels.

• Entry Level 90 PVV per second for mid-sized companies with low transaction volume
• Medium Range 200 PVV per second for companies dealing with millions of cards