u.trust General Purpose HSM CSe-Series

u.trust General Purpose HSM
CSe-Series

The multi-tenant Hardware Security Module with tamper-active physical security and PQC-readiness for future-proof protection of critical applications.

  • Overview
  • Key Features
  • Description
  • Specifications
  • Add Ons
  • Models
  • Use Cases
  • Applications
  • Resources

Tamper-active HSM with Multi-Tenancy Design

Tamper-active HSM with Multi-Tenancy Design
Tamper-active HSM with Multi-Tenancy Design

The u.trust General Purpose HSM CSe-Series is the modern Hardware Security Module designed to meet the highest physical security requirements. It supports multi-tenancy and offers upgrade options for Post-Quantum Cryptography, ensuring future-proof protection for critical applications.

  • Key Features

  • Description

  • Specifications

  • Add Ons

Highest Physical Security

Highest Physical Security

Ensure secure key generation, storage, and usage inside the tamper-active Hardware Security Module specifically designed for sensitive and critical applications.

Advanced sensor mechanism

Advanced sensor mechanism

The HSM reacts to all types of mechanical, chemical, and physical threats: In the event of an attack, sensitive keys and data stored within the HSM’s internal memory are actively and quickly erased.

Containerized architecture for scalable multi-tenancy

Containerized architecture for scalable multi-tenancy

Deploy cHSMs as a shared cluster to boost performance and resilience or leverage the strong isolation of the cHSMs to create a true multi-tenant solution.

Designed Crypto-Agile

Designed Crypto-Agile

Designed with crypto-agility in mind, the HSMs are in-field upgradable with PQC algorithms such as ML-KEM, ML-DSA, LMS, HSS, XMSS, and XMSS-MT.

SDK for custom implementations

SDK for custom implementations

Develop custom firmware, implement proprietary algorithms, or create custom key derivation functions with the SDK.

The u.trust General Purpose HSM CSe-Series is a tamper-active Hardware Security Module designed with a modern, container-based architecture inspired by cloud technologies.

Its high physical security is based on an advanced sensor mechanism with a sensor protection film that reacts to all types of mechanical, chemical, and physical threats. In the event of an attack, the HSM actively and rapidly erases all sensitive keys and data from its internal memory.

The u.trust General Purpose HSM CSe-Series is upgradeable with support for Post Quantum Cryptography (PQC), blockchain, and 5G algorithms and offers flexibility for custom solutions via the Software Development Kit. This makes it an ideal choice for securing future-proof critical applications.

image
Cryptographic Interfaces (APIs)

  • Cryptographic Interfaces (APIs)

  • Included Cryptographic algorithms

  • Mobile network related functions and algorithms

  • Blockchain-specific algorithms

  • Post Quantum Cryptography algorithms

Cryptographic Interfaces (APIs)

  • PKCS #11
  • Java Cryptography Extension (JCE)
  • Microsoft Crypto API (CAPI), and Cryptography Next Generation (CNG)
  • Extensible Key Management (SQLEKM)
  • OpenSSL
  • Utimaco‘s native Cryptographic eXtended services Interface (CXI)
  • Utimaco’s REST Cryptography API (in progress)
background image
image

Included Cryptographic algorithms

  • RSA, DSA, ECDSA with NIST and Brainpool curves, EdDSA
  • DH, ECDH with NIST, Brainpool and Montgomery curves
  • Edwards curves Ed25519 and Ed448
  • AES, Triple-DES, DES
  • MAC, CMAC, HMAC
  • SHA-1, SHA-2, SHA-3, RIPEMD
  • Hash-based deterministic random number generator (DRG.4 acc. AIS 31)
  • True random number generator (PTG.2 acc. AIS 31)
  • Chinese Algorithms
background-image
image

Mobile network related functions and algorithms

  • Subscriber Identifier De-concealing Function, SIDF Profiles A and B
  • Authentication Vector Generation functions 5G-AKA, 5G-EAP-AKA, 4G-EAP-AKA, EPS-AKA, EAP-AKA, UMTS-AKA, IMS-AKA, GBA-AKA, GSM-AKA
  • Bulk Authentication Vector Generation for 3G and 4G AKA protocols
  • Re-Synchronization function XMAC-S
  • Milenage, TUAK, COMP
  • And more, see full list here
background-image
image

Blockchain-specific algorithms

  • BIP32/44
  • SLIP-010
  • MultiSig & Boneh–Lynn–Shacham (BLS) signing algorithm
  • And more, see full list here
background-image
image

Post Quantum Cryptography algorithms

  • ML-DSA
  • ML-KEM
  • XMSS and XMSS-MT
  • LMS and HSS
  • And more, see full list here
background-image
image
image

Application Packages

5G Protect Blockchain Protect Quantum Protect
image

SDKs

Software Development Kit
image

Simulator / Trial

GP HSM Simulator
image

Others

360 HSM Monitoring Double Key Encryption
image

Models

The u.trust General Purpose HSM CSe-Series is crypto-agile and in progress for FIPS 140-3 Level 4 validation. All models support external and internal storage and feature a Key Partitioning System with multiple PKCS #11 partitions – regardless of container count. They can be upgraded for PQC, blockchain, or 5G use cases, or fully customized with the Software Development Kit. All models are available as LAN appliance or PCIe card.

Contact Sales
CSe100
CSe100
Up to 101 RSA 2K signatures / second

The HSM model for entry-level use cases with up to 101 RSA 2k signatures per second and 1 container.

The HSM model for entry-level use cases with up to 101 RSA 2k signatures per second and 1 container.

CSe2k
CSe2k
Up to 2,050 RSA 2k signatures / second

The HSM model for entry to mid-level use cases with up to 2,050 RSA 2k signatures per second and 4 containers.

The HSM model for entry to mid-level use cases with up to 2,050 RSA 2k signatures per second and 4 containers.

CSe5k
CSe5k
Up to 5,100 RSA 2k signatures / second

The HSM model for mid-level use cases with up to 5,100 RSA 2k signatures per second and 8, 16, or 31 containers.

The HSM model for mid-level use cases with up to 5,100 RSA 2k signatures per second and 8, 16, or 31 containers.

Use Cases

Data Encryption teaser Image
データ暗号化
データを読み取り不可能な暗号文に変換することで、最も機密性の高い資産を保護します。
Learn More
Document Signing
文書署名
法的拘束力のある安全な電子署名をデジタル文書に簡単に適用できます。
Learn More
Key Injection
キーインジェクション
ハードウェア・セキュリティ・モジュールを活用し、安全で将来性のあるキー・インジェクション・プロセスを実現
Learn More
Code Signing
コード・サイン
コード署名処理に必要な暗号鍵の生成と保護
Learn More
Public Key Infrastructure
公開鍵基盤
公開鍵基盤における証明書に使用される暗号鍵の生成と保護
Learn More

Certifications and Compliance

All u.trust General Purpose HSM CSe-Series models are certified to:

Complaint and Secure

FIPS 140-3 Level 4 in Progress

FIPS 140-3 is the new NIST standard for cryptographic modules. It will succeed the FIPS 140-2 standard in 2026. The certification for u.trust General Purpose HSM CSe-Series is in progress.

Complaint and Secure

CC / NITES

All models are certified according to NITES, which is the certification of IT products that meet high assurance requirements for Singapore government agencies.

Complaint and Secure

PCI PTS HSM v3

All models are certified according to PCI PTS HSM v3 enfolds operational and technical security requirements for HSMs to ensure secure payments.

image

アプリケーションパッケージ

5G Protect

5g protect 5G Protect

モバイルネットワークにおける加入者認証と鍵合意のためのソリューション。

もっと詳しく知る

Blockchain Protect

Blockchain Blockchain Protect

ブロックチェーンの取引と資産を作成、検証、保護するソリューション。

もっと詳しく知る

Double Key Encryption

Double key Double Key Encryption

Double Key EncryptionによるMicrosoft Azure Cloudに保存されたデータの暗号化ソリューション。

もっと詳しく知る

Quantum Protect

quantum Quantum Protect

Post Quantum Cryptographyファームウェア拡張は、あなたのインフラに量子耐性を追加します。

もっと詳しく知る

GP HSMs: Also Available as a Service

Learn More

Webinar

Migrating to PQC – How NXP applied quantum security with Utimaco

Discover how NXP, a global semiconductor leader, leverages the u.trust General Purpose HSM Se-Series with PQC firmware extension to enable secure firmware updates using the ML-DSA algorithm.

Watch Now

Resources

Technology Brief Quantum Resistance

With Utimaco, you are already prepared today for the quantum challenges of tomorrow

ダウンロード
Achieve Quantum Resistance with Utimaco

With Utimaco, you are already prepared today for the quantum challenges of tomorrow

ダウンロード
Technology Brief Brochure Block Safe

Secure Blockchain processes with Utimaco Blockchain Protect

ダウンロード
Blockchain Protect leaflet

Secure Blockchain processes with Utimaco Blockchain Protect

ダウンロード
Technology Brief Mobile Network Trustserver

The solution for mobile subscriber authentication and key agreement in mobile networks

ダウンロード
5G Protect Leaflet

The solution for mobile subscriber authentication and key agreement in mobile networks

ダウンロード
Brochure Double Key Encryption

Two-Tier Security for the Most Sensitive Data in Azure Cloud

ダウンロード
Double Key Encryption

Two-Tier Security for the Most Sensitive Data in Azure Cloud

ダウンロード

Ready to Secure Your Digital Future?

Contact Sales

Related Products

Enterprise Secure Key Manager

Enterprise Secure Key Manager

市場で最も相互運用性が高く、統合されたKey Management Systemは、すべての暗号鍵を一枚のガラスで管理します。

Learn More
Timestamp as a Service

Timestamp as a Service

eIDAS 認定を受けた初のタイムスタンプサービスで、文書やデータの真正性を保証する認定電子タイムスタンプを作成します。

Learn More

How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      About Utimaco's Downloads

      Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).

      For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.

      Download via e-mail

       

      A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.

       

      How can we help you futher?