Fortezza
Fortezza is an information security system that implements NIST/NSA cryptographic algorithms.[1] A Fortezza Crypto Card is a PC Card based security token.[2] Each individual who is authorized to see protected information is issued a Fortezza card that stores private keys and other data needed to gain access. It contains an NSA approved security microprocessor called Capstone (MYK-80) that implements the Skipjack encryption algorithm.
The Fortezza card has been used in government, military, and banking applications to protect sensitive data.[3] The cards are interchangeable within the many types of equipment that support Fortezza and can be rekeyed and reprogrammed by the owners, making them easy to issue and reuse. This simplifies the process of rekeying equipment for crypto changes: instead of requiring an expensive fill device, a technician is able to put a new Fortezza card in the device's PCMCIA slot.
Fortezza was developed for the U.S. government's Clipper chip project and has been used by the U.S. Government in various applications. The original Fortezza card (KOV-8) is a Type 2 product which means it cannot be used for classified information. The most widely used Type 1 encryption card is the KOV-12 Fortezza card which is used extensively for the Defense Message System (DMS). The KOV-12 is cleared up to TOP SECRET/SCI. A later version, called KOV-14 or Fortezza Plus, uses a Krypton microprocessor that implements stronger, Type 1 encryption and may be used for information classified up to TOP SECRET/SCI. It, in turn, is being replaced by the newer KSV-21 PC card with more modern algorithms and additional capabilities.
The Fortezza Plus card and its successors are used with NSA's Secure Terminal Equipment voice and data encryption systems that are replacing the STU-III. It is manufactured by the Mykotronx Corporation and by Spyrus. Each card costs about $240 and they are commonly used with card readers sold by Litronic Corporation.
References
- ↑ Shirey, Robert (August 2007). "Definitions". Internet Security Glossary, Version 2. IETF. p. 133. RFC 4949. https://tools.ietf.org/html/rfc4949#page-133. Retrieved February 16, 2012.
- ↑ "FIPS-140-1 Security and FORTEZZA Crypto Cards". Choosing Security Solutions That Use Public Key Technology. Microsoft. Retrieved February 16, 2012.
- ↑ John R. Vacca (May 1995). "NSA provides value-added crypto security - National Security Agency; Group Technology's Fortezza Crypto Card". Communications News. Nelson Publishing. Retrieved February 16, 2012.
- "FORTEZZA crypto card". Jane's Military Communications. Jane's Information Group. Aug 10, 2009. Retrieved February 16, 2012.
- Workstation Security Products Division (2 January 1997). "Basic Certification Requirements for FORTEZZA™ Applications". National Security Agency. Retrieved February 16, 2012.
- "FORTEZZA". Rainbow Technologies. Retrieved February 16, 2012.
- "Fortezza Crypto Card". Crypto Museum. Retrieved February 16, 2012.
- Kenneth W. Dam and Herbert S. Lin, ed. (1996). "The Capstone/Fortezza Initiative". Cryptography's role in securing the information society. National Research Council. Washington, DC: National Academy Press. pp. 176–177. ISBN 978-0-309-05475-1. Retrieved 16 February 2012.
- Peter Gutmann (2004). "The Capstone/Fortezza Generator". Cryptographic security architecture: design and verification. New York: Springer. pp. 236–237. ISBN 978-0-387-95387-8. Retrieved 16 February 2012.