Securosys Primus X Cyber Vault | The Ultimate Security Standard for HSM

As quantum computing progresses, it poses challenges for traditional public key cryptographic algorithms, potentially jeopardizing the security of sensitive data. Quantum computers outperform conventional computers in reconstructing the cryptographic key pairs that protect your data. Therefore, organizations might start thinking about developing migration strategies toward upgrading authentication and encryption technologies to make the algorithms and protocols quantum-proof algorithms and ensure the security of their operations.

Solution

Being prepared for the future is one thing, implementing quantum-readiness another. Transitioning to these new algorithms requires careful preparation and early execution to allow ample time for testing and minimizing disruptions. Yet, the migration and setup of a new device needs to be straightforward. This is where the HSM Primus X Cyber Vault steps in as a crucial solution.

By facilitating hybrid signatures that seamlessly integrate both classical and post-quantum cryptographic algorithms, Cyber Vault ensures a smooth transition process. It offers a comprehensive approach by supporting the integration of RSA or ECC/ED with PQC signatures, AES encryption/decryption, and key exchange protocols. The focus on balanced performance ensures that efficiency is maintained throughout the transition period, safeguarding the integrity of sensitive data in the face of evolving cyber threats.

With over 50,000 concurrent transactions per second (TPS), the Primus X Cyber Vault stands as the fastest HSM in the market. It is scalable to over 1,000,000 concurrent transactions per second in clustered environments.

Ensure the integrity of your data during transport, storage, and operation, providing a secure foundation for critical infrastructure.

Effortlessly integrate into existing systems with easy commissioning, configuration, attestation and maintenance procedures.

Customize the Primus X Cyber Vault to meet your specific needs, ensuring adaptability as your requirements evolve.

Decanus (link to the page) enables seamless, highly secure, and efficient remote management of your HSM and user partition.

Group multiple Primus HSMs together to support redundancy and load balancing, ensuring continuous operation in mission-critical environments.

Hybrid Operations

Our approach to a save transition to PQC stands out by incorporating hybrid signatures that utilize both classical and PQC algorithms while maintaining consistent throughput. This comprehensive approach supports the integration of RSA or ECC/ED with PQC signatures like Kyber, Dilithium, or SPHINCS+, AES encryption/decryption, and key exchange protocols.

Optical Interface for Seamless Integration

Easily integrate into any network environment with support for copper and optical interfaces up to 10 Gbps.

Market-Leading Performance

The Primus X Cyber Vault sets itself apart as the fastest HSM on the market, handling over 50,000 concurrent transactions per second (TPS). It can be scaled to over 1,000,000 concurrent transactions per second in clustered environments, impressively demonstrating its undisputed pioneering role.

Adaptability

The versatility of the Primus X Cyber Vault makes it the top choice for securing high-volume financial transactions, blockchain systems, crypto asset management, and more.

Security Features

Networking Features

Technical Data

Security Features

Multi-barrier software and hardware architecture with supervision mechanisms
Secure supply-chain

128/192/256-bit AES with GCM-, CTR-, ECB-, CBC-, MAC Mode
Camellia, ChaCha20-Poly1305, ECIES
RSA 1024-8192, DSA 1024-8192
ECDSA 224-521, GF(P) arbitrary curves (NIST, Brainpool, ...)
ED25519, Curve25519
Diffie-Hellman 1024, 2048, 4096, ECDH
SHA-2/SHA-3 (224 - 512), SHA-1, RIPEMED-160, Keccak
HMAC, CMAC, GMAC, Poly 1305
Post-Quantum Cryptographic (PQC) algorithms CRYSTALS-Dilithium, CRYSTALS-Kyber, SPHINCS+

Two hardware true random number generators (TNRG)
NIST SP800-90 compatible random number generator

Key Management
Up to 1000 partitions

Number of client connections not restricted
Unlimited number of backups

Cryptographic evidence of audit relevant parameters (keys configuration hardware states logs time-stamping)

Multiple security officers (m out of n)
Identification based on smart card and PIN

Networking Features

Technical Data

Model	RSA 4096	RSA 3072	RSA 2048	ECC256
X2P RSA	2’000	5’000	12’000	15’000
	ECC521	ECC384	ECC256
X2P RSA	10’000	15’000	30’000

Two redundant power supplies, hot pluggable:  100 ... 240 V AC, 50 ... 60 Hz
Power dissipation: 65 W (typ.), 100 W (max.)
Backup lithium battery: Lithium Thionyl Chloride 0.65g Li, IEC 60086-4, UL 1642, 3.6V

4 Ethernet RJ-45 ports with 1 Gbps (rear)
2 SFP+ slots for optical 10Gbps Ethernet modules (rear)
2 Console ports (RJ45, front/rear)
2 USB-A management ports (front/rear)
1 USB-C management port (rear)
3 Smart card slots

3 slots for Securosys security smart cards
4 LEDs for system and interface status (multicolor)
Touch screen for configuration
Console interface
Optional Decanus Terminal for remote administration

Temperature ranges (IEC 60068-2-1 Ad, IEC 60068-2-2 Bd): storage -20 ... +60 °C; operation 0 ... +35 °C
Temperature ranges (IEC 60068-2-1 Ad, IEC 60068-2-2 Bd): storage -20 ... +60 °C; operation 0 ... +35 °C
MTBF (RIAC-HDBU-217Plus) at tamb=25 °C: >100 000 h
Dimensions (w×h×d) 417 x 44 x 365 mm (1U 19" EIA standard rack)
Weight 7.5 kg

FIPS140-3 Level 3 (in progress)
CC EN 419221-5 eIDAS protection profile (in progress)
CE, FCC, UL

HSM Primus X Cyber Vault

Challenge

Solution

Key Benefits

Use Cases

Technical Specifications

Resources

HSM Primus X Cyber Vault

Challenge

Solution

Key Benefits

Use Cases

Technical Specifications

Resources

Related Products