SafeNet’s hardware security module certified to new standard

SafeNet Inc., a global provider of information security, affiliated under common management with Aladdin Knowledge Systems, announced on Thursday that its Luna PCI for Luna SA 4.1 Hardware Security Module (HSM) has achieved Common Criteria EAL4+ certification.

The Common Criteria Evaluation laboratory tested SafeNet’s PCI for Luna SA 4.1 and determined that this product’s security features are sufficient to protect against known and theoretical attacks. Under Common Criteria, a product is evaluated to one of seven specific Evaluation Assurance Levels (EALs).

The evaluation tested a total of 70 features, 63 more than were tested in competitors’ HSMs like physical protection, authentication tokens, HSM firmware, logical protections, host API, tamper response, and flaw reporting procedures.

SafeNet Luna SA 4.1 HSM is a flexible, network-attached hardware security module containing a FIPS 140-2 Level 2- and Level 3-certified cryptographic module. The HSM features cryptographic processing and hardware key management to ensure the security and performance of applications. SafeNet’s Luna cryptographic platform solves the problem of cryptographic performance, storage, and scalability.

The Luna SA HSM is part of SafeNet’s complete Data Protection Solution Suite that protects identities, transactions, data and communications and provides database and application data encryption, disk and file encryption, centralized key management, network and WAN (wide area network) encryption, and two-factor authentication.

“SafeNet designed the Luna SA 4.1 to unprecedented security standards and submitted it to an evaluation that was ten times more stringent than other HSM vendors on the market. The Luna SA had more features analyzed in this certification,” said Tsion Gonen, corporate vice president, SafeNet. “Other Common Criteria-certified HSMs cannot compare to SafeNet’s Luna SA 4.1. SafeNet achieved a higher certification, which provides assurance to our customers that they are utilizing the best HSM in the market.”

In the hardware security market, Common Criteria certification is a regulatory requirement in government, financial, and insurance institutions. The international Common Criteria standard was developed to unify and supersede national IT security certification schemes from several different countries, including the U.S., Canada, Germany, the U.K., France, and the Netherlands. Testing was performed by the Netherlands Scheme for Certification in the Area of IT Security, Brightsight BV, an ISO 17l21-accredited lT Security Evaluation Facility, licensed by BSI and NSCIB to perform Common Criteria evaluations.

SafeNet Luna PCI for SA 4.1 HSM was evaluated at EAL4+, a high level permitted by international mutual recognition arrangements, and was augmented in flaw remediation and in vulnerability analysis to meet the requirement of protection against motivated and skilled attackers.