CyProtect AG - SafeNet iKey 2032 / SafeNet (Rainbow) iKey 2032 FIPS

SafeNet iKey 2032 datasheet

SafeNet iKey 2032 & 2032 FIPS

At the moment only the Rainbow iKey 2032 is available in new SafeNet design. The iKey 2032 FIPS is available in black Rainbow design.

iKey 2032 Overview
The SafeNet iKey 2032 USB-based two-factor authentication token provides cost-effective and easy-to-use control for multiple applications and network services, e.g. Virtual Private Networks (VPN), and controls Intranet, Extranet, and Internet access. The iKey 2032 Series is optimized for all Public Key Infrastructure (PKI) environments, including both X.509 Digital Certificates and PGP.

The iKey 2032 token comprises of two main hardware components, a Cryptographic controller/chip and a USB bus controller. The iKey 2032 Series is based on two cryptographic controllers that offer highly reliable and internally secure storage capabilities shown in the chart below.

A Cryptographic chip Operating System provides an environment to manage and generate cryptographic keys. Further functions provide data storage for other data items and a Security system to support a wide range of requirements. Data storage is split into two areas. One area is for public data, where Digital Certificates and Public keys can be stored. The second area is for secure storage of Private keys and other secrets. This private area has authenticated secure access, and the data is held in an encrypted form.

The USB controller is a USB 1.1 compliant that performs the same function as a Smart Card reader, transporting data for use in the cryptographic controller.

The iKey 2032 Series Software for Windows Clients (Windows 98, ME, NT, 2000, XP) uses iKey 2032 tokens in a PKI system to process and store private cryptographic data.

The iKey 2032 token is capable of performing all private, public, and secret key functions within the token. When these critical operations are performed within the iKey 2000, a much higher level of information security is achieved than can be provided by client-side software-only solutions.

However, performing all of cryptographic functions within the token is not always practical or desirable. When used in conjunction with the iKey 2032 Series Software, all private key functions are performed within the iKey 2032’s Cryptographic controller chip, including generation of Digital Signatures. All public key functions are performed within a Security Module embedded within the iKey 2032 Series Software. Secret key functions can be performed both within the Cryptographic controller chip and/or within the iKey 2032 software, depending upon the application requesting the secret key function.

The iKey 2032 series can perform a variety of cryptographic algorithms, including: DES in ECB and CBC modes, DESX, triple-DES, RC2, RC4 and RC5. It fully supports PKI, e.g. X.509 Digital Certificates and Public/Private keys, and PGP Public/Private keys.

The iKey 2032 Security system provides an end-user pass phrase authentication to perform sensitive functions in the iKey 2032. These functions include Digital Signature generation and unwrapping of session encryption keys, i.e. those functions that require the use of the closely guarded private key of the user's public key pair.