It takes significant investments of time and money to achieve FIPS validation. Meeting FIPS requirements can cost tens of thousands of dollars and take 8-12 months – assuming you get it right the first time. Most don’t. In fact, according to NIST, 48% of cryptography functions have flaws and 30% of algorithms don’t conform to standards. Rather than slip competitive development schedules and strain tight project budgets, let Certicom enable you to meet FIPS requirements in hours with a proven solution that industry leaders are already using. With a pre-approved FIPS 140-2 Validated level 1cryptographic module from Certicom, you can build government approved client and server side applications without having to go through the lengthy and costly FIPS approval process. In addition, Certicom provides expanded number of crypto classes enables additional high security functions, such as Elliptic Curve Cryptography (ECC) algorithms, which significantly increase application security, boosts efficiency, and provides a lasting competitive advantage. In the government market, applications and products associated with the communication of sensitive data must meet FIPS requirements. It can take 8-12 months and significant budget. The .NET community can now meet this requirement in hours and show ROI. "With Security Builder API for .NET, Certicom is providing a valuable tool for developers to add advanced security to applications built on .NET.” -Thom Robbins Director .NET Platform, Product Management at Microsoft Beyond government requirements, mobile devices are expected to work with a host of applications, networks, and other devices. By nature, remote devices are subject to interoperability and security concerns that are resolved by universal standards and effective porting of inherent security applications. Microsoft’s .NET Framework for Desktops and .NET Compact Framework for mobile devices makes it easy for developers to address interoperability issues, but doesn’t automatically port cryptographic functions. Certicom Security Builder API for .NET solves these issues by enhancing the security and flexibility of applications. By enabling complete FIPS 140-2 and Suite B-level security in mobile devices, developers can port existing security into and between .NET Frameworks to deliver superior security. This comprehensive solution also functions inside the .NET environment as managed code, to offer the dual advantage of leveraging existing operating system interactions while still allowing calls to the native, unmanaged code maintained within the wrappers. This means code can be reused in any .NET Framework application, drastically speeding up development and increasing ROI. Enable Suite B support for .NET applications and reduce development time
Certicom Security Builder API for .NET enhances the security and flexibility of your applications by enabling you to quickly and easily achieve complete Suite-B level security. Whether you’re running applications on a desktop or a mobile device, Certicom enables you to port existing security into and between the .NET Framework and the .NET Compact Framework quickly and easily - saving you time and money while delivering superior security.  Security Builder API for .NET facilitates seamless access to a richer set of cryptographic classes, enabling you to achieve Suite B-level security and FIPS 140-2 validation. When used with a pre-approved cryptographic module that supports popular protocols including TLS and VPN in FIPS mode, Security Builder API for .NET can save you 8-12 months of development time. Key Benefits
Increase ROI Leverage your legacy systems, reduce development time required, and re-use existing code because components built using Security Builder API for .NET can be used by any of the 20+ approved .NET languages - including C# and Visual Basic. Security Builder API for .NET is also interoperable with Microsoft CAPI, the new Microsoft CNG architecture, and supports all .NET platforms. Reduce Time-to-Market Designed to the same standard as those supported by Microsoft, Security Builder API for .NET crypto classes integrate into the .NET Framework architecture with ease, cutting development time. The .NET API enables ECC-based security to be ported seamlessly between existing desktops to both the .NET and .NET Compact Frameworks. To speed up development even more and show how the APIs are used, Certicom also supplies C# and Visual Basic samples. Achieve Suite B-level Security Certicom is the only provider to enable legacy .NET applications and newer environments to attain complete Suite B-level security with highly optimized implementations. The .NET API also supports RFC 4492 and the new Suite B TLS and IPSec standards co-authored by the NSA. Key Features Security Builder API for .NET facilitates seamless access to a richer set of cryptographic classes, enabling you to achieve Suite B-level security and FIPS 140-2 validation. When used with a pre-approved cryptographic module that supports popular protocols including TLS and VPN in FIPS mode, Security Builder API for .NET can save you 8-12 months of development time. | | Security Builder API for .NET | Security Builder API for .NET with FIPS | | Cryptographic Providers | Security Builder Crypto-C 5.x | Security Builder GSE-C 2.x* | | Symmetric Encryption | AES | AES | | Asymmetric Encryption | N/A | N/A | | Key Agreement/Key Transport | ECDH, ECMQV | ECDH, ECMQV | | Digital Signatures | ECDSA | ECDSA | | Hash Functions | SHA-1, SHA-256, SHA-384, SHA-512, MD5 | SHA-1, SHA-256, SHA-384, SHA-512, MD5 | | Random Number Generation | ANSI X9.62, FIPS 140-2 extension | ANSI X9.62, FIPS 140-2 extension | | Implementation Code Size Range | 200-275 KB | approx 1.1 MB | | Code Sample Languages | C#, Visual Basic | C#, Visual Basic | | Platform Support | .NET 1.0/1.1 Win32 .NET Win64 .NET Windows Mobile 2003 Windows Mobile 2003Emulator Windows CE 4.x/ 5.x | .NET 2.0 Win32 .NET Win64 .NET Windows Mobile 2003 Windows Mobile 2003Emulator Windows CE 5.x | .NET 1.0/1.1 Win32 .NET Windows Mobile 2003 Windows Mobile 2003Emulator Windows CE 4.x/ 5.x | .NET 2.0 Win32 .NET Windows Mobile 2003 Windows Mobile 2003Emulator Windows CE 5.x | * FIPS Certificate #542
|