INSIGHTS

PCI DSS V4.0.1: A PRACTICAL GUIDE TO CRYPTOGRAPHIC KEY GOVERNANCE

PREPARING QUALIFIED ELECTRONIC SIGNATURES FOR THE POST-QUANTUM ERA

CRYPTOMATHIC & JSCRAMBLER JOINT SOLUTION BRIEF: RUNTIME TRUST FOR DIGITAL BANKING

CRYPTO-AGILITY: FROM CRYPTOGRAPHIC INFRASTRUCTURE TO ENTERPRISE CONTROL

eIDAS 2.0: SIX REMOTE SIGNING INFRASTRUCTURE MISTAKES TO AVOID

WHEN AI RAISES THE COST OF WEAK TRUST

QUALIFIED ESIGNATURES IN BANKING: TRUST & EIDAS 2.0 COMPLIANCE

SELECTING THE RIGHT MOBILE APPLICATION SECURITY SOLUTION 

QUANTUM SECURE KEY MANAGEMENT: PQSHIELD AND CRYPTOMATHIC'S CRYSTALKEY360

PROTECTING MOBILE APPS IN THE AGE OF AI AND QUANTUM COMPUTING

THE FUTURE OF MOBILE APPLICATION SECURITY

This whitepaper examines Cryptomathic’s approach to full app protection and how its Mobile Application Security Core (MASC) implements this layered security. We will highlight how MASC uses mobile app encryption (to protect the app at rest), an advanced Confpacker tool (to safeguard secrets and configuration), and unique Runtime Application Self-Protection (RASP) technology (to detect and react to attacks in real time).

THE ESSENTIALS OF EMV CERTIFICATE AUTHORITY FOR A NEW PAYMENT SCHEME

This whitepaper examines the reason behind the rising interest in new domestic payment schemes, the technical requirements to establish such schemes, and the value proposition of an EMV Certificate Authority (EMV CA), particularly Cryptomathic’s Obsidian CA, as the essential cryptographic root of trust for any new payment scheme.

PART 3: ROADMAP TO PQC MIGRATION FOR FINANCIAL INSTITUTIONS

Part 3 of this whitepaper explores a phased roadmap for PQC migration in financial institutions—from crypto inventory and centralized key management to hybrid pilots and full-scale deployment—ensuring compliance and quantum-safe security by 2030.

PART 2: ROADBLOCKS TO PQC MIGRATION AND STRATEGIC SOLUTIONS FOR FINANCIAL INSTITUTIONS

Part 2 of this whitepaper explores the biggest roadblocks to PQC migration for financial institutions—from crypto sprawl and audit fatigue to skills gaps and vendor immaturity—and learn how crypto agility and centralized key management can help overcome them.

PART 1: THE COMPLIANCE MANDATE FOR PQC MIGRATION

Part 1 of this whitepaper examines how emerging regulations and global standards, such as DORA, NIS2, NIST and more, are compelling financial institutions to strengthen cryptographic resilience and prepare for the post-quantum era.

A BUYERS GUIDE TO SELECTING THE RIGHT QUALIFIED SIGNING AND SEALING SOLUTION

This a list of general questions and may vary slightly depending on the use case, however, keep in mind that a vendor who ticks all these boxes will have the tools to help future proof your operations and help your business scale in the long run.

A BUYERS GUIDE TO SELECTING A KEY MANAGEMENT SYSTEM

This a list of general questions and may vary slightly depending on the use case, however, keep in mind that a vendor who ticks all these boxes will have the tools to help future proof your operations and help your business scale in the long run.

PREPARING FOR THE RISE OF QUANTUM COMPUTING

This eBook aims to give readers the knowledge to create an actionable plan to protect their data, assets, and organizations against quantum attacks by adopting a strategy for cryptographic agility.

EIDAS COMPLIANT QUALIFIED ELECTRONIC SIGNATURES

This paper lays out the challenges of offering qualified electronic signatures (QES) as defined in the eIDAS regulation. We explore the considerations that eSignature platforms face when building their roadmaps towards offering legal certainty and non-repudiable electronic signatures in the EU region.

THE EUROPEAN DIGITAL IDENTITY WALLET

Delve into the use cases and best practices for safeguarding sensitive customer data on mobile apps using the European Digital Identity Wallet (EUDI Wallet).

PCI DSS & CRYPTO KEY MANAGEMENT

This white paper provides both a high-level summary of how a Key Management System applies to PCI DSS and also a more detailed examination of the specific benefits a centralized and automated system.

SECURING MOBILE APPS WITH MASC

Understand the threat landscape and how MASC's evolutionary security strategy can overcome such threats and provide 360º protections against attacks.

ACHIEVING REAL-WORLD CRYPTO-AGILITY

A guide on the benefits available from a centrally managed, agile cryptographic platform - for banks & financial institutions.

GUIDANCE ON ACHIEVING QUALIFIED REMOTE ESIGNING WHITE PAPER

What is the most secure and user-friendly digital signing experience? Explore security requirements.

DIGITAL SIGNATURES FOR DUMMIES

Demystifying the relevant technologies for deploying and managing digital signatures.

EMV KEY MANAGEMENT EXPLAINED

Understand the requirements EMV places on key management. This paper explains EMV, seen from a crypto angle, for all involved parties in acquiring and issuing

KEY MANAGEMENT COMPLIANCE - EXPLAINED

The major aspects including regulatory authorities, compliance schemes, audits, best practices, etc.

CLOUD SIGNING VS. SMARTCARD SIGNING

Compare the security, usability, and costs of different signature generation technologies.

ADOPTING A GLOBAL E-SIGNATURE STRATEGY

Here we offer the advice of 'Think Globally, Act Locally' to large financial institutions eager to adopt a successful digitalization & eSignature strategy.

E-SIGNATURES AND EIDAS TRANSFORMING DIGITAL BUSINESS

Explore the current industry outlook for eSignatures and compliance with eIDAS.

MASC
PRODUCT SHEET

Comprehensive and dynamic protection for banking apps

2020 GLOBAL ENCRYPTION TRENDS STUDY

Trends and strategies for the adoption of encryption and key management tools

BRING YOUR OWN KEY FOR CLOUD BANKING APPLICATIONS

Explore the benefits of moving to the cloud and the security challenges

CKMS: A BYOK SOLUTION FOR LIFECYCLE MANAGEMENT OF CLOUD KEYS

This solution brief gives an overview of how Cryptomathic’s Crypto Key Management System (CKMS) provides a centralized, on-premise KMS that enables multi-cloud key management and on-prem-to-cloud migration. 

CKMS - IBM MAINFRAME 
ZOS INTEGRATION

This solution brief describes some of the key management challenges large banks and financial institutions face when running critical applications on IBM’s z/OS ‘mainframe’ platform. 

SECURE MOBILE TRANSACTIONS - FACT OR FICTION?

When developing a security strategy for mobile banking apps, it is vital to understand the attack scenarios and motives of attacks.