Compaq TrustMaster CSP

The most advanced hardware security engine for the Microsoft CrypotoAPI environment

Features at a Glance

High-performance security services for Windows NT Server-based, business-critical applications
The Compaq TrustMaster cryptographic service provider (CSP) brings the unrivaled power of a dedicated hardware cryptographic engine to the Microsoft CryptoAPI environment, allowing you to add strong, fast, and transparent security services to any Windows NT® Server 4.0 or Windows® 2000 Server application.

Compaq security processors safeguard millions of transactions every day along private networks, such as the global bank payment network. Now, Compaq has brought the same kind of physically and logically secure capabilities to the Microsoft CryptoAPI environment on a convenient PCI expansion card for Windows NT Server or Windows 2000 Server systems.

The Compaq TrustMaster CSP integrates seamlessly via a common interface to required cryptographic services, simplifying the task of developing applications that are secure, portable, and standardized. It works directly with your application to fortify and accelerate a broad range of security features essential to electronic commerce, such as real-time generation and verification of digital signatures and certificates, and bulk encryption and decryption tasks.

A scalable CSP engine that offloads security processing transparently
The TrustMaster CSP is a general-purpose cryptographic service provider that provides digital signatures, bulk hashes, key generation, and data encryption tasks under Microsoft’s CryptoAPI interface. It has been digitally signed by Microsoft to operate within the Windows environment, and uses genuine RSA encryption algorithms for all public-key operations. In addition, with optional Compaq Load Balancer software, up to four TrustMaster CSP engines can be added to your Windows NT Server or Windows 2000 Server system to work in tandem to deliver even higher performance and more capability. All cryptographic work is performed within the Compaq onboard security engine. The hardware-secured design ensures that all sensitive data is safeguarded within its tamper-resistant enclosure.

The hardware cryptographic engines provide a highly cost-effective solution to the dual problems of adding strong security while enhancing system performance. Modern cryptographic operations can be compute intensive and consume valuable processor cycles. The TrustMaster CSP offloads cryptographic tasks and provides the highest level of security available. Essential security services such as privacy, authentication, integrity, and nonrepudiation are provided for the most advanced digital commerce applications. These essential application-level services are provided instantly and transparently.

Strong, fast, and transparent security services are required to build the trusted network infrastructure for high-volume digital commerce. With more than 25 years of experience meeting the most stringent security requirements, Compaq is uniquely qualified to meet the demands of Internet commerce.

Standard Compaq Security Engine Features

Cryptographic functions

CSP type
PROV_RSA_FULL

Supported algorithms
RSA, DES, SHA-1, Digital Signature, Digital Hash, RC2, RC4, MD2, MD5

Supported key lengths
256 to 2,048 bits for digital signatures
256 to 512 bits for key exchange
40 to 128 bits for symmetric encryption

CSP security features

Physical security
Compliance with FIPS 140-1 Level 3 requirements

Logical security
RSA algorithms and key management are embedded to protect against unauthorized access or modification

Secure initialization
Hardware is initialized with cryptographic keys using the Compaq Secure Configuration Terminal (SCT).

Performance scalability
The cryptographic workload can be distributed across as many as eight TrustMaster CSP PCI expansion cards without optional Load Balancer software.

Certification/compliance

Safety
UL, CSA, TUV