Identifying a symmetric key in Thales HSM and use that to decrypt the data

8/2/2012 8:15:33 AM
Gravatar
Total Posts 1

Identifying a symmetric key in Thales HSM and use that to decrypt the data

Hello,

We have a requirement to encrypt and decrypt the data with a predefined symmetric Data encryption key stored in the Thales HSM.

The key would be loaded in the HSM.

The C# application would send an identifier which would identify the symmetric Key and use that key to encrypt the data passed to the HSM using any mechanism proposed on run time.

Triple DES and using double length key.

I have downloaded your library and would buy this if it does what we need,
Any guidance would be helpful. I am doing a POC right now.

Please suggest if you have methods which can do this for us.

 

Thanks

Santhosh
 

8/3/2012 9:22:52 AM
Gravatar
Total Posts 300
Ugo Chirico http://www.ugochirico.com

Re: Identifying a symmetric key in Thales HSM and use that to decrypt the data

Hi Santhosh

NCryptoki allows to do what you need.

Keys in the HSM can be identified by the LABEL attribute or ny ID attribute. You can use the Find method to search for the required key specifying the LABEL and/or the ID as filter.

Once you have identified the key you can use Encrypt and Decrypt methods

You can find a piece of code that does that in our wiki in this page: 

http://wiki.ncryptoki.com/Encrypt-and-Decrypt-with-a-DES3-key.ashx