SDK Getting Started

Overview

Our Software Development Kit (SDK), by PKWARE. Available for C++, .NET and Java, gives you high performance, cross-platform security that is easily embedded and managed without changing the way people work. Embedding encryption operations directly into an application increases protection from security gaps that exist in people, processes, and technology. Application layer encryption provides end-to-end protection, ensuring sensitive information remains insulated from vulnerabilities that exist in adjacent applications and the downstream systems that are used to store and exchange it. Available for both structured and unstructured data, the SDK integrates at the data access layer of the application and not the database or storage layer. Changes to existing applications consist of two or three lines of code.

• For structured applications, only columns/fields that contain sensitive information, like credit cards or social security numbers are encrypted. This approach allows DBAs to continue to perform their duties and only restricts visibility to sensitive information. Available options for length preserving or length + format preserving encryption aid in maintaining referential integrity.
• For unstructured applications, persistent file-level encryption is applied that travels with the data.

The SDK is available in multiple languages, easy to use and handles all of the complexity and heavy lifting of the most well vetted and available cryptographic services, key interfaces, key stores and key types accessible on each operating platform.

Supported Platform

File Encryption Certificate and Key Types:

• Smartkeys
• X.509 Digital Certificates
• OpenPGP

Languages and Frameworks:

• Java, C, C++, Objective-C, C#, .NET (32-bit and 64-bit)
• COBOL, ASM, PL/1, CICS
• REST

Algorithms:

• Encryption:  3DES, AES128, AES192, AES256, CAST5, IDEA, AE-x
• Signing: SHA-1, SHA-256, SHA-384, SHA-512
• Strict checking and revocation status support

Key Storage and Retrieval:

• Hardware: KMIP HSM, Smartcards including PIV / CAC

• Software: PKCS#11, LDAP, KMIP, CAPI/CNG, Keychain, Keystore, ICSF-CKDS, PKDS, Security Server, RACF, ACF2, Top Secret

Key Interfaces:

• LDAP, KMIP, SKS, Smartcards (PIV/CAC)

Cryptographic Services:

• CAPI/CNG, OpenSSL, Apple CC, Bouncy Castle, Crypto-J

Application Layer Encryption Overview

Works How You Work

Simple encrypt / decrypt API access and language support for Java, C# for .NET, and C/C++ makes development easy and includes support for most structured database development environments. Field level encryption reduces the complexity of cryptographic operations through API level function calls that require only the data that needs to be encrypted and the associated keying information. The result is streamlined processing because original field length and type are preserved. 

Works With What You Have In Place

Commonly used security methods such as Transparent Data Encryption (TDE) only provide protection for data at rest. Field level encryption complements TDE and provides a (Database Management Systems) DBMS agnostic means for application developers to encrypt selected data. In the event that data moves to other platforms or environments, security is guaranteed. Additionally, administrators can back up databases without having visibility to the information itself.