3 min read
Misuse of X.509 Certificates & Keys Involved in SolarWinds Attack
This article discusses the misuse of X.509 certificates and keys in the SolarWinds attack and how Cryptomathic CKMS and CSG could help protect...
3 min read
How to Simplify Compliance Audits for Key Management Systems
This article explains some of the cryptographic key management tasks involved in demonstrating and proving compliance to acceptable standards, and...
3 min read
eIDAS & RTS for Strong Customer Authentication
The Delegated Regulation on Regulatory Technical Standards (RTS) by the European Commission aims to facilitate Strong Customer Authentication (SCA)...
3 min read
Key Management Interoperability: Achievements and Challenges
The Key Management Interoperability Protocol standard intends to provide interoperability across various key management environments and hence to...
3 min read
EU's CEF Building Blocks: eID, eSignature & eDelivery
The CEF building blocks of the digital service infrastructure, as defined under the Connecting Europe Facility (CEF), cover essential components like...
2 min read
Lessons from the SolarWinds Attack: Best Practices
Since the announcement of the SolarWinds supply chain attack, intensive analysis has been done by Crowdstrike, FireEye (with additional details),...
3 min read
Symmetric Key Creation & Keyshare Generators Explained
In this article, we look at the process of a keyshare generator and key derivation as described by the ANSI X9.24-1-2017 standard. This process is...
5 min read
BYOK for Google Cloud: Financial Institution Benefits
This article discusses the concerns surrounding key management for cloud environments and how Cryptomathic addresses them by bringing banking-grade...
2 min read
E-signatures vs Digital Signatures: Key Differences and Regulations
People often use the terms e-signature and digital signature interchangeably. However, they aren't the same thing. Everything from the processes that...