/Logo%202023.svg "Logo 2023"){kind=small}
/Group.svg "Group"){kind=small}
3 min read
Payment & Banking Cryptography: The Benefits of z/OS & the Z Platform
This article looks at some reasons for popularity of the IBM mainframe platform in the banking sector and touches upon its limitation for...
Key Management (4)
2 min read
Meltdown & Spectre – What you Need to Know about Protecting your Keys
A number of serious security vulnerabilities, collectively known under the names of “Meltdown” and “Spectre” [1][2], have recently been discovered in...
3 min read
Why Key Management Systems Must Understand ANSI X9.24/TR-31 Key Blocks
Martin Rupp (guest): 26. November 2021
The PCI Council requires most actors of payment networks to implement ANSI X9.24/TR-31-compliant key blocks to wrap and securely transmit, transfer,...
3 min read
IBM z15 Mainframe & Secure Key Management for FS Platforms
Banks continue to feel the profound transformational effects that digital technologies have on their business. This can be seen in the creation and...
3 min read
What is a Crypto-Abstraction Layer?
Chris Allen: 23. October 2021
A crypto-abstraction layer (CAL) is, in its most general sense, an application programming interface (API) - also known as a library- that hides...
2 min read
Introduction to Cryptographic Key Blocks - FAQs
Martin Rupp (guest): 21. October 2021
This article proposes answers to a series of frequently asked questions (FAQs) about key blocks.
3 min read
ANSI X9.24-1-2017: Key Utilization and Storage
Martin Rupp (guest): 18. September 2021
This article briefly summarizes the symmetric cryptographic key utilization and storage requirements as described by the ANSI X9.24-1-2017 (part 1)...
3 min read
How to use Thales Key Blocks in payShield HSMs
Martin Rupp (guest): 19. August 2021
Thales Key Blocks are an essential cryptographic key wrapping format. In comparison to other key block formats, they are proprietary and only work...
2 min read
Cryptomathic CKMS: Centralized, Automated Key Management for payShield
Banks and financial institutions must adhere to a rigorous set of security and regulatory practices to protect data, communications, and processes.