TransformIT Features & Benefits

Software-based Key Protection Benefits

Resources

Download TransformIT - Data Sheet

Protecting Keys in Digital Media Systems - Whitepaper

Contact Sales

TransformIT offers unique advantages to ensure robust protection of cryptographic keys without impact on performance, development or customer support of your application.
With TransformIT, the keys are never visible in a decrypted state. TransformIT's Encrypted Domain creates a unique shield for all sensitive operations of encryption/decryption such that the key never shows its face, either in memory or at runtime.

With support for both static and dynamic keys as well as sensitive data, TransformIT provides comprehensive and unprecedented protection for cryptographic keys.

Features and Benefits

• Cryptographic algorithms support:
  Supports major cryptographic algorithms such as RSA, AES, and ECC
• Effectively hides keys
  After transformation, the actual key bits are never formed – not just at rest, but also not in memory or registers at runtime. By preventing the single key from ever showing its face, TransformIT protection thwarts memory dump and memory remnant attacks on your keys.
• Actively prevents key discovery
  TransformIT creates multiple execution paths for a given cryptographic routine, any one of which is invoked probabilistically at run time. This prevents brute force dynamic analysis such as combinatorial attacks and trial-and-error progress.
• Encrypted Domain Operations
  TransformIT works by separating application data into two domanin; the Open Domain and the Encrypted Domain. The Encrypted Domain encompasses data and code protection by TransformIT. Specifically, data is operated on within an Encrypted Domain, so operations can be performed without ever having to decrypt and reveal sensitive keys or data. This includes static keys, dynamic keys and any sensitive user data.
• Tunable
  Both the depth and breadth of a key protection graph are fully tunable, allowing a full tradeoff between size/performance constraints and the level of security.
• Data Obfuscation
  Sensitive application data can be processed and operated on without being decrypted.