u.trust General Purpose HSM CSe-Series

u.trust General Purpose HSM
CSe-Series

The multi-tenant Hardware Security Module with tamper-active physical security and PQC-readiness for future-proof protection of critical applications.

  • Overview
  • Key Features
  • Description
  • Specifications
  • Add Ons
  • Models
  • Use Cases
  • Applications
  • Resources

Tamper-active HSM with Multi-Tenancy Design

Tamper-active HSM with Multi-Tenancy Design
Tamper-active HSM with Multi-Tenancy Design

The u.trust General Purpose HSM CSe-Series is the modern Hardware Security Module designed to meet the highest physical security requirements. It supports multi-tenancy and offers upgrade options for Post-Quantum Cryptography, ensuring future-proof protection for critical applications.

  • Key Features

  • Description

  • Specifications

  • Add Ons

Highest Physical Security

Highest Physical Security

Ensure secure key generation, storage, and usage inside the tamper-active Hardware Security Module specifically designed for sensitive and critical applications.

Advanced sensor mechanism

Advanced sensor mechanism

The HSM reacts to all types of mechanical, chemical, and physical threats: In the event of an attack, sensitive keys and data stored within the HSM’s internal memory are actively and quickly erased.

Containerized architecture for scalable multi-tenancy

Containerized architecture for scalable multi-tenancy

Deploy cHSMs as a shared cluster to boost performance and resilience or leverage the strong isolation of the cHSMs to create a true multi-tenant solution.

Designed Crypto-Agile

Designed Crypto-Agile

Designed with crypto-agility in mind, the HSMs are in-field upgradable with PQC algorithms such as ML-KEM, ML-DSA, LMS, HSS, XMSS, and XMSS-MT.

SDK for custom implementations

SDK for custom implementations

Develop custom firmware, implement proprietary algorithms, or create custom key derivation functions with the SDK.

The u.trust General Purpose HSM CSe-Series is a tamper-active Hardware Security Module designed with a modern, container-based architecture inspired by cloud technologies.

Its high physical security is based on an advanced sensor mechanism with a sensor protection film that reacts to all types of mechanical, chemical, and physical threats. In the event of an attack, the HSM actively and rapidly erases all sensitive keys and data from its internal memory.

The u.trust General Purpose HSM CSe-Series is upgradeable with support for Post Quantum Cryptography (PQC), blockchain, and 5G algorithms and offers flexibility for custom solutions via the Software Development Kit. This makes it an ideal choice for securing future-proof critical applications.

image
Cryptographic Interfaces (APIs)

  • Cryptographic Interfaces (APIs)

  • Included Cryptographic algorithms

  • Mobile network related functions and algorithms

  • Blockchain-specific algorithms

  • Post Quantum Cryptography algorithms

Cryptographic Interfaces (APIs)

  • PKCS #11
  • Java Cryptography Extension (JCE)
  • Microsoft Crypto API (CAPI), and Cryptography Next Generation (CNG)
  • Extensible Key Management (SQLEKM)
  • OpenSSL
  • Utimaco‘s native Cryptographic eXtended services Interface (CXI)
  • Utimaco’s REST Cryptography API (in progress)
background image
image

Included Cryptographic algorithms

  • RSA, DSA, ECDSA with NIST and Brainpool curves, EdDSA
  • DH, ECDH with NIST, Brainpool and Montgomery curves
  • Edwards curves Ed25519 and Ed448
  • AES, Triple-DES, DES
  • MAC, CMAC, HMAC
  • SHA-1, SHA-2, SHA-3, RIPEMD
  • Hash-based deterministic random number generator (DRG.4 acc. AIS 31)
  • True random number generator (PTG.2 acc. AIS 31)
  • Chinese Algorithms
background-image
image

Mobile network related functions and algorithms

  • Subscriber Identifier De-concealing Function, SIDF Profiles A and B
  • Authentication Vector Generation functions 5G-AKA, 5G-EAP-AKA, 4G-EAP-AKA, EPS-AKA, EAP-AKA, UMTS-AKA, IMS-AKA, GBA-AKA, GSM-AKA
  • Bulk Authentication Vector Generation for 3G and 4G AKA protocols
  • Re-Synchronization function XMAC-S
  • Milenage, TUAK, COMP
  • And more, see full list here
background-image
image

Blockchain-specific algorithms

  • BIP32/44
  • SLIP-010
  • MultiSig & Boneh–Lynn–Shacham (BLS) signing algorithm
  • And more, see full list here
background-image
image

Post Quantum Cryptography algorithms

  • ML-DSA
  • ML-KEM
  • XMSS and XMSS-MT
  • LMS and HSS
  • And more, see full list here
background-image
image
image

Application Packages

5G Protect Blockchain Protect Quantum Protect
image

SDKs

Software Development Kit
image

Simulator / Trial

GP HSM Simulator
image

Others

360 HSM Monitoring Double Key Encryption
image

Models

The u.trust General Purpose HSM CSe-Series is crypto-agile and in progress for FIPS 140-3 Level 4 validation. All models support external and internal storage and feature a Key Partitioning System with multiple PKCS #11 partitions – regardless of container count. They can be upgraded for PQC, blockchain, or 5G use cases, or fully customized with the Software Development Kit. All models are available as LAN appliance or PCIe card.

Contact Sales
CSe100
CSe100
Up to 101 RSA 2K signatures / second

The HSM model for entry-level use cases with up to 101 RSA 2k signatures per second and 1 container.

The HSM model for entry-level use cases with up to 101 RSA 2k signatures per second and 1 container.

CSe2k
CSe2k
Up to 2,050 RSA 2k signatures / second

The HSM model for entry to mid-level use cases with up to 2,050 RSA 2k signatures per second and 4 containers.

The HSM model for entry to mid-level use cases with up to 2,050 RSA 2k signatures per second and 4 containers.

CSe5k
CSe5k
Up to 5,100 RSA 2k signatures / second

The HSM model for mid-level use cases with up to 5,100 RSA 2k signatures per second and 8, 16, or 31 containers.

The HSM model for mid-level use cases with up to 5,100 RSA 2k signatures per second and 8, 16, or 31 containers.

Use Cases

Data Encryption teaser Image
Datenverschlüsselung
Schützen Sie Ihre sensiblen Daten, indem Sie sie in unlesbaren Chiffretext verwandeln.
Learn More
Document Signing
Unterzeichnung von Dokumenten
Fügen Sie Ihren digitalen Dokumenten ganz einfach rechtsverbindliche, sichere elektronische Signaturen hinzu
Learn More
Key Injection
Key Injection
Nutzung von Hardware-Sicherheitsmodulen für sichere und zukunftssichere Schlüsselinjektionsprozesse
Learn More
Code Signing
Code-Signierung
Generierung und Schutz von kryptografischen Schlüsseln, die für Code-Signierungsprozesse erforderlich sind
Learn More
Public Key Infrastructure
Public Key Infrastructure (PKI)
Generierung und Schutz von kryptografischen Schlüsseln, die für Zertifikate in einer Public Key Infrastructure verwendet werden
Learn More

Certifications and Compliance

All u.trust General Purpose HSM CSe-Series models are certified to:

Complaint and Secure

FIPS 140-3 Level 4 in Progress

FIPS 140-3 is the new NIST standard for cryptographic modules. It will succeed the FIPS 140-2 standard in 2026. The certification for u.trust General Purpose HSM CSe-Series is in progress.

Complaint and Secure

CC / NITES

All models are certified according to NITES, which is the certification of IT products that meet high assurance requirements for Singapore government agencies.

Complaint and Secure

PCI PTS HSM v3

All models are certified according to PCI PTS HSM v3 enfolds operational and technical security requirements for HSMs to ensure secure payments.

image

Anwendungspakete

5G Protect

5g protect 5G Protect

Die Lösung für die Teilnehmerauthentifizierung und Schlüsselvereinbarung in Mobilfunknetzen.

Lernen Sie mehr

Blockchain Protect

Blockchain Blockchain Protect

Die Lösung zum Erstellen, Überprüfen und Schützen von Blockchain-Transaktionen und -Vermögenswerten.

Lernen Sie mehr

Double Key Encryption

Double key Double Key Encryption

Die Double Key Encryption-Lösung für in der Microsoft Azure Cloud gespeicherte Daten.

Lernen Sie mehr

Quantum Protect

quantum Quantum Protect

Die Post-Quantum-Kryptographie-Firmware-Erweiterung, um Ihre Infrastruktur quantenresistent zu machen.

Lernen Sie mehr

GP HSMs: Also Available as a Service

Learn More

Webinar

Migrating to PQC – How NXP applied quantum security with Utimaco

Discover how NXP, a global semiconductor leader, leverages the u.trust General Purpose HSM Se-Series with PQC firmware extension to enable secure firmware updates using the ML-DSA algorithm.

Watch Now

Resources

Technology Brief Quantum Resistance

With Utimaco, you are already prepared today for the quantum challenges of tomorrow

Herunterladen
Achieve Quantum Resistance with Utimaco

With Utimaco, you are already prepared today for the quantum challenges of tomorrow

Herunterladen
Technology Brief Brochure Block Safe

Secure Blockchain processes with Utimaco Blockchain Protect

Herunterladen
Blockchain Protect leaflet

Secure Blockchain processes with Utimaco Blockchain Protect

Herunterladen
Technology Brief Mobile Network Trustserver

The solution for mobile subscriber authentication and key agreement in mobile networks

Herunterladen
5G Protect Leaflet

The solution for mobile subscriber authentication and key agreement in mobile networks

Herunterladen
Brochure Double Key Encryption

Two-Tier Security for the Most Sensitive Data in Azure Cloud

Herunterladen
Double Key Encryption

Two-Tier Security for the Most Sensitive Data in Azure Cloud

Herunterladen

Ready to Secure Your Digital Future?

Contact Sales

Related Products

Enterprise Secure Key Manager

Enterprise Secure Key Manager

Das Key Management System mit der größten Interoperabilität und Integrationsfähigkeit auf dem Markt.

Learn More
Timestamp as a Service

Timestamp as a Service

Der erste eIDAS-zertifizierte Zeitstempel-Dienst, der qualifizierte elektronische Zeitstempel für die Authentizität von Dokumenten und Daten erstellt.

Learn More

Wie können wir Ihnen helfen?

Sprechen Sie mit einem unserer Spezialisten und erfahren Sie, wie Utimaco Sie unterstützen kann.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      About Utimaco's Downloads

      Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).

      For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.

      Download via e-mail

       

      A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.

       

      How can we help you futher?