Chiasmus replacement with GreenShield: VS-NfD approval now also for password-based file encryption

Chiasmus replacement with GreenShield: VS-NfD approval now also for password-based file encryption

Handling VS-NfD classified information becomes much more convenient if you can encrypt it as a file or send it securely by e-mail. However, government agencies and companies may only use products with government VS-NfD approval for this purpose. GreenShield from cryptovision is one of the few solutions that has already met this requirement for several years.

The GreenShield offering consists of GreenShield Mail (end-to-end email encryption) and GreenShield File (file encryption). GreenShield first received approval for the processing and transmission of VS- NfD (as well as EU and NATO restricted) classified information back in December 2018, and in March of this year, the German Federal Office for Information Security (BSI) has now also approved the current version with numerous updates.

Password-based, symmetric file encryption

One application widely used by public authorities and companies is file encryption: until now, the file encryption program Chiasmus has been used to encrypt and pass on VS-NfD-rated information. However, the approval of this software expires at the end of 2021 and will not be renewed. GreenShield is ideally suited to replace Chiasmus. In addition to asymmetric encryption and decryption using key pairs (consisting of a public and a private key), the current GreenShield version also supports symmetric encryption for file encryption. In this variant, the sender and receiver do not exchange public keys, but agree on a password.

Virtual Desktop support

GreenShield scores not only with high usability, but also with support for various smart cards. In the current version, the approval of GreenShield has also been extended to server systems and thus also supports Virtual Desktop infrastructures. Integration into various existing VS infrastructures is thus also possible for centralized systems.

HCL Notes® 11

GreenShield Mail is the only VS-NfD approved email encryption solution for HCL Notes® on the German market. The current version supports HCL Notes ®11 in addition to the aging Notes 8 and 9 client. Last but not least, the solution’s multi-client capability is unique: it supports both Microsoft Outlook and HCL Notes on the same device. Thus, only GreenShield Mail enables a smooth migration from Notes to Outlook.

More information: https://www.cryptovision.com/en/products/security-applications/greenshield/

 

 

Hafnium authority hack shows once again: end-to-end encryption is indispensable

Hafnium authority hack shows once again: end-to-end encryption is indispensable

Once again, a security incident has the IT world in a tizzy. This time it is several security holes in the widely used mail server Microsoft Exchange that have triggered the disaster. In Germany alone, at least 10,000 Exchange servers were initially affected. Through the aforementioned security holes, an attacker can gain administrator rights on an Exchange server, which gives him access to all emails processed there. According to press reports, a hacker group from China known as Hafnium is said to have used these vulnerabilities for numerous attacks worldwide. It is not yet clear what damage they caused. Meanwhile, Microsoft has provided security updates that are supposed to fix the problem.

In the meantime, it has become known that hafnium has also attacked at least three federal authorities. However, with reference to the welfare of the state, the federal government is still keeping under wraps which institutions these are and what exactly happened. The choice of words alone, however, suggests a serious threat. After all, the term “welfare of the state” has already been used by the Federal Constitutional Court, which ruled in 2009 that this term was linked to “existential security and secret protection concerns” as well as “information requiring secrecy”.

Regardless of this, the Exchange hack and the Hafnium attacks show once again: it is becoming more and more important to reliably protect emails from unauthorised access. Even if the operator of a mail server does everything right, a security gap in the software used can throw a spanner in the works. For confidential data, email encryption is therefore a must. However, an encryption gateway connected to the server, as is used in many places, is often not sufficient. Because if – as in this case – the attacker has access to the mail server, gateway protection is as good as useless. Instead, end-to-end encryption is necessary, which takes place on the client.

A proven client-based email encryption solution that provides end-to-end security is GreenShield from cryptovision. GreenShield is particularly suitable for public authorities that process VS-NfD data. As one of the few email encryption products on the market, GreenShield has the VS-NfD approval required for this purpose.

When it comes to secure email communication in the public authority environment, you are definitely on the safe side with GreenShield.

Links

Cryptovision’s partner program opens next level

Cryptovision’s partner program opens next level

More than 60 companies have joined cryptovision’s exclusive partner program, club cv, as Members since its launch in June 2020. Covering business areas such as IT Security, Government Identity and IoT, cryptovision’s partner network has completely embraced the concept behind club cv. Now, the next level of engagement is open for business: club cv has officially launched its Partner Levels. These apply to both Volume and Strategy Partners and are available in different tiers.

Partner level companies are our valued resellers, independent soft- and hardware vendors, certified service providers and technology partners, who integrate our products into their solution and vice versa. For current Member level companies, this means that they can get upgraded to Partner Level if the conditions apply.

Also new in January 2021 is the online club cv partner lounge: A protected area for partner to find useful information on upcoming activities, relevant sales forms and contact information. The club cv lounge will be the main platform to find partner-relevant information for both, club cv members and partners. For more information, please visit the club cv website.

 

New name, new look: cv act sc/interface becomes SCinterface

New name, new look: cv act sc/interface becomes SCinterface

Version 8.0 with support for macOS 11

Just in time for the turn of the year, cv act sc/interface, cryptovision’s proven smartcard middleware, not only got a new name. SCinterface also convinces with new features: The graphical user interface has been fundamentally optimized and the ease of use has been improved throughout thanks to a uniform, more modern design. With the new version 8.0, cryptovision has further expanded the capabilities of SCinterface in response to current market developments. SCinterface customers can now use the full range of middleware use cases with the latest card operating systems NXP JCOP4, Infineon SECORA™ and ATOS CardOS 5.4 & 5.5. With SCinterface 8.0, the current D-TRUST signature and seal cards for qualified signatures can also be used throughout Europe in compliance with eIDAS. Also new in version 8.0 is support for macOS 11 Big Sur, which has only been available since November 2020. This enables a secure and flexible design of BYOD and enterprise IT concepts.

With SCinterface 8.0, two-factor authentication is easily implemented to connect from the home workstation to the corporate network via a virtual private network (VPN) or to use a virtual desktop infrastructure (VDI). SCinterface 8.0 works unrivaled with all major smart cards on Windows, Linux and macOS.

About SCinterface

SCinterface middleware integrates smartcards and other security tokens as well as virtual and remote credentials into IT environments. SCinterface acts across platforms and supports more than 100 different smartcards, security tokens and profiles on all major operating systems. There are many useful features including biometrics, highly customizable PIN caching for different security levels, Microsoft Virtual Smart Card and remote token support.

SCinterface is used by numerous customers worldwide in a variety of industries. These include German companies Allianz, Signal Iduna and E.ON, Dutch KPN and SwissSign, among others.

Manifesting change in times of fear

Manifesting change in times of fear

 

Manifesting change in times of fear

The events that have taken place during 2020 seem to have put us all at great distance. The pandemic has shrouded the world in a fog of fears of death and illness. But it’s not just the disease itself, which causes hardship to people: coronavirus mitigation measures taken by rich countries to protect themselves, directly affect those less fortunate all over the world. Instead of isolating and turning inward to focus on our own challenges, let us take up the true spirit of the holiday season by being compassionate and let us cultivate a more balanced sense of responsibility for others and ourselves.

cryptovision is committed to manifesting this change. We have made charitable contributions to projects in affected regions, with a focus on our areas of business.

The cryptovision family would like to wish you and yours a joyous holiday season, a very happy New Year and all the best in 2021!

Cryptovision presents ePasslet Suite on Infineon SECORA ID X at SDW Virtual

Cryptovision presents ePasslet Suite on Infineon SECORA ID X at SDW Virtual

At this year’s SDW Virtual, cryptovision presents its ePasslet Suite V3 on SECORA™ ID X, the new Java Card™ platform from Infineon. With the help of ePasslet Suite, users of SECORA™ ID X will be able to put numerous eID functions into practice easily and flexibly. A presentation will be displayed in the SDW Virtual “Technology Showcase” section.

Cryptovision’s ePasslet Suite on SECORA™ ID X provides applets for various eID document applications, including electronic passports, eIDAS-compliant ID and signature cards, international electronic driver’s licenses, electronic health cards (eHIC), custom national eID cards and more. ePasslet Suite V3 also supports ICAO LDS 2.0, an extension of electronic passports with electronic visas and entry and exit stamps.

In addition, ePasslet Suite on SECORA™ ID X can be freely customized through various configuration options. It can evolve to support new use cases and applications while retaining Common Criteria (CC) certification, thereby enabling multi-application cards and documents.

“We are delighted to have reached a further milestone on our path to offer modular, standard-based eID solutions on all major chip platforms. Government customers across the world will benefit from this broadened portfolio,” states cryptovision’s CEO Markus Hoffmeister.

ePasslet Suite on SECORA™ ID X is being certified according to Common Criteria (CC) EAL 5+. It is  available in three editions, offering cost-efficient configurations for standard as well as high-end and customized ID document solutions. Samples of the solution are now available on request.

With Infineon’s SECORA™ ID X as additional platform for ePasslet Suite, cryptovision extends its offering for international eID customers:  Infineon’s expertise is based on more than 200 government ID projects that cover more than 75 percent of the world’s population.

Learn more on the ePasslet Suite website.

 

Republic of Malta launches electronic identity card

Republic of Malta launches electronic identity card

Another EU country has introduced an electronic identity card for its citizens. After Germany, Spain, Italy, Belgium, Finland, Estonia and several other countries, the Republic of Malta has also been issuing ID documents with a smart card chip since August 2020. The 400,000 citizens of Malta will be equipped with the new document over the next few years, gradually replacing the old ID cards, which will remain valid until the planned expiration date.

The new Maltese ID card is contactless. It complies with European Union requirements and is therefore based on proven data formats. The keys and certificates used are compatible with those used in other countries. Like the electronic passport, which is now in widespread use worldwide, the Maltese identity document also stores biometric features, which means that an ID card can be securely assigned to its owner. In addition to the smartcard chip, the new ID document has various physical security features that make forgery much more difficult. In particular, the name and additional information about the holder are laser-engraved into the document.

In the near future, the Maltese government plans to offer e-government services via the Internet, which citizens can use with the new ID card as identity proof. This requires a card reader on the PC and smart card middleware.

Electronic identity documents are currently experiencing a boom. An electronic ID card is not only more secure, but also and above all enables a multitude of new applications. For example, the issuer can decide to use an electronic identity document for payment, as a health insurance card, for authentication on the Internet, as a driver’s license, as a door key, as a travel document, for digital signing and for age verification – to name just a few examples. In most cases, a secret key is used as a security anchor, which is stored unreadably on the chip and authenticated by a digital certificate.

Electronic ID cards play an important role in making the increasing digitalization secure and reliable. It is therefore to be welcomed that more and more countries are equipping their citizens with such documents.

To learn more about electronic identity card systems, check here.

Source: https://newsbook.com.mt/en/new-biometric-id-now-in-circulation/

 

cryptovision holds strategy workshop in the Uckermark

cryptovision holds strategy workshop in the Uckermark

It is almost a tradition that cryptovision’s managers and a few other employees met for a workshop in the fall of this year to discuss the company’s strategic orientation away from the daily business.

Up to now, these retreats have always taken place on a finca on Mallorca, but due to the Corona crisis, the company management decided to forgo a trip abroad this time. Instead, the choice fell on the idyllically situated village of Fredenwalde in the Uckermark, almost 100 kilometers north of Berlin. The “Gutshof Fredenwalde” there, with its extensive grounds and spacious, Corona-compatible premises, offered just the right environment for five days of fine-tuning the company strategy while enjoying the comforts of life.

Under the direction of the managing directors Markus Hoffmeister and Marco Smeja, the participants divided into different working groups to strategically examine the three business areas of cryptovision, Government-ID, IT-Security and IoT and Industry. The groups developed detailed plans for action in the near future. Of course, in this process, club cv also played a role, which was publicly presented at Digital Mindshare in the spring.

Since cryptovision is currently in a growth phase, the topic of personnel recruitment was also in focus. As a glance at the company’s career page shows, there are currently over a dozen open positions, from Senior Software Engineer to Project Manager Sales. The increasing number of employees naturally makes it necessary to develop new organizational and administrative structures. The participants in Fredenwalde set the course for this. On the basis of a new Wiki structure, cryptovision’s knowledge management is currently being raised to a new level.

As usual at cryptovision, despite all the work, the pleasure was not neglected. A catering company provided the workshop participants with regional specialties from the Uckermark cuisine. In addition, a visit to a distillery was on the program. The icing on the cake was the weather – it was unusually warm for the time of year.

 

Mike Büskens makes meters with cryptovision

Mike Büskens makes meters with cryptovision

More than 100 kilometers run, 1904 Euros for the Mike macht Meter campaign and lots of fun – that was the result of cryptovision’s company run “Run Crypto Run”, which took place yesterday for the first time.

The company internal event came about after the B2Run, an annual running event with over 3,500 participants, in which cryptovision traditionally participates, was cancelled due to corona. cryptovision took the matter into its own hands.

As partner and participant of the “Run Crypto Run”, cryptovision managing director Markus Hoffmeister was able to win over his long-time friend and ex-football professional Mike Büskens, who won the UEFA Cup with Schalke 04 in 1997. Büskens, who lives in Gelsenkirchen and is still closely associated with the club, initiated the aforementioned Mike macht Meter (“Mike makes meters”) project a few months ago. This project collects money for various social organizations and institutions in Gelsenkirchen – including the homeless aid organization Warm durch die Nacht.

When the starting signal was fired yesterday, Tuesday at 5:30 pm in the Von-Wedelstaedt Park in Gelsenkirchen, 30 employees and friends of cryptovision set off on the optional five or three kilometer route at 31 degrees air temperature. Past the science park and over the nearby Rheinelbe coal dump with the well-known “Stairway to Heaven”, the course finally led back to the starting point, where urgently needed cool drinks were served at the finish.

Of course, a subsequent barbecue party was not to be missed. On this occasion managing director Markus Hoffmeister handed over a cheque to ex-Schalke professional Mike Büskens for his aid project – in the amount of 1904 Euro, which is almost without alternative for Schalker.

Anyone who also wants to make meters themselves and support the Eurofighter aid project can do so at any time. All you have to do is cover one distance continuously and then donate 04 EURO or more per kilometer – via Paypal or bank transfer (mike.macht.meter, DE22422600010116335402). Büskens guarantees that the incoming donations are used to 100 percent to help people. “As part of a constantly growing movement, we want to do good for people in Gelsenkirchen and for our health,” says the former professional footballer. “Everybody join in, join me in the meter!

 

Cryptovision strengthens management team

Cryptovision strengthens management team

cv cryptovision GmbH, a leading manufacturer of encryption solutions for companies and public authorities, is preparing for the growing demand in the area of identity-based security solutions and is strengthening its management team: Manager Stefan Frenzel took up the position of Senior Vice President Sales on August 1.

After a successful 2019, the forecasts for the coming years are also consistently positive. cryptovision is still on a growth path and strengthens the management team in the course of this development. With the appointment of Stefan Frenzel as Senior Vice President Sales, the company underpins its course to develop solutions for the security of electronic identities. Stefan Frenzel has held numerous operational and strategic management positions in international technology companies, including Cherry GmbH and HID Global. Most recently, he was Head of Sales at the high-tech company Distec GmbH.

Marco Smeja, the former Head of Sales at cv cryptovision, was promoted to second Managing Director and CSO last year and in this position is responsible for other business areas beyond sales, including consulting and legal.

Commenting on the new sales management appointment, Smeja says: “cryptovision is a dynamic and flexible company with an outstanding product portfolio. We are pleased to have won Stefan Frenzel, a manager with valuable experience in the international ID security market. With his support, we will continue to drive the positive development of cryptovision not only in the international segment of electronic ID cards and passports with our portfolio around the ePasslet Suite”.

cryptovision develops, among other things, security solutions that sign and encrypt company data such as e-mails and files. The Gelsenkirchen-based company offers numerous security solutions certified by the German Federal Office for Information Security (BSI), such as the product GreenShield. It allows the processing and transmission of information with the classification level “Classified information – for official use only (VS – NfD)”.