FIPS for .NET PDF Print E-mailBookmark and Share


Certicom .NET Solutions

Pre-Validated FIPS

Pre-Validated FIPS for .NET

Certicom .NET Resources

Security Builder API for .NET Technical Brief

Security Builder API for .NET Datasheet


Meeting Government Security Requirements

Certicom Security for Government Suppliers

Ask Our Experts

It takes significant investments of time and money to achieve FIPS validation. Meeting FIPS requirements can cost tens of thousands of dollars and take 8-12 months – assuming you get it right the first time. Most don’t.

In fact, according to NIST, 48% of cryptography functions have flaws and 30% of algorithms don’t conform to standards. Rather than slip competitive development schedules and strain tight project budgets, let Certicom enable you to meet FIPS requirements in hours with a proven solution that industry leaders are already using.

With a pre-approved FIPS 140-2 Validated level 1cryptographic module from Certicom, you can build government approved client and server side applications without having to go through the lengthy and costly FIPS approval process.

In addition, Certicom provides expanded number of crypto classes enables additional high security functions, such as Elliptic Curve Cryptography (ECC) algorithms, which significantly increase application security, boosts efficiency, and provides a lasting competitive advantage.

In the government market, applications and products associated with the communication of sensitive data must meet FIPS requirements. It can take 8-12 months and significant budget. The .NET community can now meet this requirement in hours and show ROI.

"With Security Builder API for .NET, Certicom is providing a valuable tool for developers to add advanced security to applications built on .NET.”

-Thom Robbins

Director .NET Platform, Product Management at Microsoft

Beyond government requirements, mobile devices are expected to work with a host of applications, networks, and other devices. By nature, remote devices are subject to interoperability and security concerns that are resolved by universal standards and effective porting of inherent security applications. Microsoft’s .NET Framework for Desktops and .NET Compact Framework for mobile devices makes it easy for developers to address interoperability issues, but doesn’t automatically port cryptographic functions. Certicom Security Builder API for .NET solves these issues by enhancing the security and flexibility of applications. By enabling complete FIPS 140-2 and Suite B-level security in mobile devices, developers can port existing security into and between .NET Frameworks to deliver superior security.

This comprehensive solution also functions inside the .NET environment as managed code, to offer the dual advantage of leveraging existing operating system interactions while still allowing calls to the native, unmanaged code maintained within the wrappers. This means code can be reused in any .NET Framework application, drastically speeding up development and increasing ROI.

 

Enable Suite B support for .NET applications and reduce development time


Certicom Security Builder API for .NET enhances the security and flexibility of your applications by enabling you to quickly and easily achieve complete Suite-B level security.

 

Whether you’re running applications on a desktop or a mobile device, Certicom enables you to port existing security into and between the .NET Framework and the .NET Compact Framework quickly and easily - saving you time and money while delivering superior security.

 

Security Builder API

 


Security Builder API for .NET facilitates seamless access to a richer set of cryptographic classes, enabling you to achieve Suite B-level security and FIPS 140-2 validation. When used with a pre-approved cryptographic module that supports popular protocols including TLS and VPN in FIPS mode, Security Builder API for .NET can save you 8-12 months of development time.

 

Key Benefits


Increase ROI
Leverage your legacy systems, reduce development time required, and re-use existing code because components built using Security Builder API for .NET can be used by any of the 20+ approved .NET languages - including C# and Visual Basic. Security Builder API for .NET is also interoperable with Microsoft CAPI, the new Microsoft CNG architecture, and supports all .NET platforms.

Reduce Time-to-Market
Designed to the same standard as those supported by Microsoft, Security Builder API for .NET crypto classes integrate into the .NET Framework architecture with ease, cutting development time. The .NET API enables ECC-based security to be ported seamlessly between existing desktops to both the .NET and .NET Compact Frameworks. To speed up development even more and show how the APIs are used, Certicom also supplies C# and Visual Basic samples.

Achieve Suite B-level Security
Certicom is the only provider to enable legacy .NET applications and newer environments to attain complete Suite B-level security with highly optimized implementations. The .NET API also supports RFC 4492 and the new Suite B TLS and IPSec standards co-authored by the NSA.

Key Features


Security Builder API for .NET facilitates seamless access to a richer set of cryptographic classes, enabling you to achieve Suite B-level security and FIPS 140-2 validation. When used with a pre-approved cryptographic module that supports popular protocols including TLS and VPN in FIPS mode, Security Builder API for .NET can save you 8-12 months of development time.

 

 
Security Builder API for .NET
Security Builder API for .NET with FIPS
Cryptographic Providers
Security Builder Crypto-C 5.x
Security Builder GSE-C 2.x*
Symmetric Encryption
AES
AES
Asymmetric Encryption
N/A
N/A
Key Agreement/Key Transport
ECDH, ECMQV
ECDH, ECMQV
Digital Signatures
ECDSA
ECDSA
Hash Functions
SHA-1, SHA-256, SHA-384, SHA-512, MD5
SHA-1, SHA-256, SHA-384, SHA-512, MD5
Random Number Generation
ANSI X9.62, FIPS 140-2 extension
ANSI X9.62, FIPS 140-2 extension
Implementation Code Size Range
200-275 KB
approx 1.1 MB
Code Sample Languages
C#, Visual Basic
C#, Visual Basic

 

Platform Support .NET 1.0/1.1
Win32 .NET
Win64 .NET
Windows Mobile 2003
Windows Mobile 2003Emulator
Windows CE 4.x/ 5.x
.NET 2.0
Win32 .NET
Win64 .NET
Windows Mobile 2003
Windows Mobile 2003Emulator
Windows CE 5.x
.NET 1.0/1.1
Win32 .NET
Windows Mobile 2003
Windows Mobile 2003Emulator
Windows CE 4.x/ 5.x
.NET 2.0
Win32 .NET
Windows Mobile 2003
Windows Mobile 2003Emulator
Windows CE 5.x

 

* FIPS Certificate #542