The Information Security Provider
atsec IT Security Blog
News about Common Criteria, Cryptographic Modules, Conferences
and other topics revolving around IT security.
-
Entropy Source Validation (ESV) Certificate Issued for the Intel DRNG
Recently the CMVP has granted ESV certificate #E57 to the Intel DRNG entropy source. The testing and submission was done by atsec and it marks the first ESV certificate granted to the Intel DRNG. The Intel DRNG (Digital Random Number Generator) is a hardware Random Bit Generator (RBG)…
-
First Post-Quantum Algorithm Certificate issued by CAVP3
On July 14, atsec obtained the first validation certificate for a post-quantum cryptographic algorithm: A4204. We used the Automated Cryptographic Validation Protocol (ACVP) to verify the correctness of the LMS (Leighton-Micali Signature) key pair generation, signature generation, and signature verification implementations in the QASM Hardware Security Module, developed…
-
The IoT Security Global Certification Challenges
In today’s interconnected world, the Internet of Things (IoT) has become an integral part of our daily lives. From smart homes to industrial automation, IoT devices are revolutionizing various industries. However, with this increased connectivity comes the need for robust security measures to protect sensitive data and ensure…
-
CEST (Confidential Evaluation of Software Trustworthiness) project finished
Following the news published in early 2022, atsec would like to proudly announce a successful completion of the CEST (Confidential Evaluation of Software Trustworthiness) project – a Swedish research project funded by Vinnova. The CEST project provides a confidential software security assurance environment enabling software supply chains to…
-
atsec attended the Omnisecure conference in Berlin
Like last year, three representatives of atsec Germany attended the Omnisecure conference from May 22 through 24, 2023, in Berlin. The Omnisecure conference has a clear focus on the German market and, in particular, national approvals of IT security products – one of the main business domains for…
-
MOVEit Vulnerability
An alleged Russian-linked ransomware gang has exploited a vulnerability in a popular file transfer tool called MOVEit to attack both commercial and government targets world-wide. This attack appears to include data theft as well as the deployment of ransomware. Since we have been asked by one of our…
-
atsec at the EU Cybersecurity Act Conference and Crypto Module Day
atsec recently attended two conferences that focused on cybersecurity certification: the International Conference on the EU Cybersecurity Act and Crypto Module Day Conferences in Brussels, Belgium, from March 28 to March 30, 2023. Both conferences focused on the upcoming regulations in the EU and discussed cybersecurity certification schemes…
-
atsec turns operations over to Artificial Intelligence
atsec information security is proud to be on the forefront of developments in the world of IT security and strives to be a step ahead of the challenges in our area of expertise. So, it was a logical step to embrace the recent advances in AI technology and…
-
atsec information security at the Milan Security Summit 2023
After years of video conferences, the Security Summit was finally back in person in Milan, Italy, from March 14 to 16, 2023. atsec couldn’t miss the opportunity to participate as gold sponsor in one of the most important cyber security events held in Italy and to meet our…