Utimaco and InfoSec Global Announce Integrated Solution for Advanced Cryptography Visibility and Management

Integration enables organizations to obtain visibility to digital keys in Hardware Security Modules (HSMs), find unmanaged keys and securely move them to Utimaco u.trust HSMs, and migrate applications to Post-Quantum Cryptography (PQC) with Utimaco’s PQC-u.trust HSMs.

Aachen (Germany) and Toronto (Ontario, Canada), 6 August 2024 – Utimaco, a leading global provider of key management, hardware security modules and secure payment solutions, and InfoSec Global, the leader in cryptographic vulnerability management and agility, today announced a strengthened partnership with the integration of InfoSec Global’s AgileSec™ Analytics platform and Utimaco’s u.trust General Purpose HSM Se-Series.

The integration streamlines the process of bringing existing, unmanaged cryptographic keys under control and provides a consolidated view of all secret keys, while also facilitating the deployment of Post-Quantum Cryptography (PQC). This combined solution empowers organizations to gain comprehensive visibility into their cryptographic landscape, proactively address vulnerabilities, identify breaches of cryptographic compliance based on standards and corporate policies while leveraging PQC-ready, secure and reliable key generation, management, and storage.

Even though every business is affected by quantum risk, post-quantum cryptography requirements are particularly pressing for financial services, banking, government, and other regulated sectors to take immediate action. In particular, they must inventory all cryptographic assets and create a baseline risk prioritization system to remediate cryptographic vulnerabilities and migrate to PQC. To help organizations accomplish this, the integration provides:

Enhanced Cryptographic Visibility and Control

Organizations face significant challenges in managing their cryptographic assets, often lacking visibility to the cryptographic keys, certificates, algorithms, libraries and protocols that are deeply embedded in diverse systems. This integrated solution addresses these challenges by:

• Comprehensive Cryptographic Discovery: AgileSec Analytics scans critical systems to create a centralized inventory of all cryptographic materials.
• Vulnerability Assessment and Remediation: The platform identifies security weaknesses and compliance gaps within the cryptographic ecosystem, enabling organizations to prioritize and remediate vulnerabilities and maintain compliance.

Seamless HSM Integration: Sensitive, but unmanaged, cryptographic keys discovered by AgileSec Analytics can be securely transferred and managed within the Utimaco u.trust General Purpose HSM. This integration enhances security while streamlining key management processes to deliver the highest level of protection.

Quantum-Safe Cryptography for Long-Term Security

The looming threat of quantum computing necessitates proactive measures to safeguard sensitive data and identities. This integrated solution offers:

• PQC Migration Readiness: AgileSec Analytics helps identify and prioritize assets that rely on vulnerable algorithms, enabling organizations to plan a smooth transition to PQC solutions.
• Quantum-Safe Key Management: Utimaco’s HSMs are designed for crypto agility and can be upgraded with the recommended PQC algorithms. They provide a secure environment for generating, storing, and managing PQC keys, ensuring long-term cryptographic agility.

Cindy Provin, CSO at Utimaco, said:

“The ever-evolving threat landscape demands a holistic approach to cryptographic management. By integrating AgileSec Analytics with our u.trust General Purpose HSMs, we provide organizations with a powerful solution to discover, analyze, and secure their cryptographic assets, ensuring they are prepared for the quantum future.”

Nagy Moustafa, Co-Founder and CEO at InfoSec Global, said:

“Our combined expertise offers a clear plan and solutions to address current vulnerabilities and migrate to PQC. This integration provides an efficient way to discover and control cryptography while benefiting from secure and reliable key generation, management, and storage.”