Utimaco eIDAS Update
June 2017

Thorsten Groetker
CTO

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 1

eIDAS
Agenda Recap – eIDAS, Trust Services, Standardization
 Signature Creation
 Time Stamping Outlook

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 2

eIDAS
Agenda Recap – eIDAS, Trust Services, Standardization
 Signature Creation
 Time Stamping Outlook

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 3

eIDAS – Recap
What is eIDAS?

 Regulation No 910/2014 of the European Parliament and of the Council on“electronic identification and trust services for electronic transactions in the internalmarket and repealing Directive 1999/93/EC”
 Published July 23rd 2014
 Adoption of implementing acts and delegated acts by July 1st 2016
 Replaces national signature laws on July 1st 2016 eIDAS aims at
 Increasing the use of electronic IDs and electronic signatures
 Fostering cross-border electronic transactions
 Strengthening the European market

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 4

eIDAS - Recap
Trust Services

 Signature creation
 Seal creation
 Time stamping Electronic registered delivery service
 Website authentication

Utimaco HSM Business Unit · Aachen, Germany · ©2017

E
l
e
c
t
r
o
n
i
c

S
i
g
n
a
t
u
r
e

Utimaco eIDAS Update, June 2017

EU's trust mark for
qualified trust services

Page 5

eIDAS - Recap
Electronic Signature vs. Electronic Seal
 Electronic signatures

 Electronic seals

 „which is used by the signatory to sign”
 “A qualified electronic signature shall havethe equivalent legal effect of a handwritten
signature.“ Intent / consent of the signatory

 „to ensure the latter’s [data] origin and integrity“ “Electronic seals should serve as evidence that
an electronic document was issued by a legal
person, ensuring certainty of the document’s
origin and integrity.” Created by a legal person Created by a natural person

 A natural person may sign on behalf of a legal
person “Created using electronic signature
creation data that the signatory can … use
under his sole control”

 “Created using electronic seal creation datathat the creator of the seal can … under its
control, use for electronic seal creation”
 Several natural persons may create seals

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 6

eIDAS - Recap
Standardization

 Need to translate legal requirements into technical specifications, e.g.
 “… ensure that at least a number of advanced electronic signature formats can be technicallysupported …”
 “… providers should apply specific management and administrative security procedures anduse trustworthy systems and products …”

 Standardization mandate M/460
 European Committee for Standardization (CEN) - Technical Committee 224 (TC 224)
 Security Requirements, Common Criteria Protection Profiles

 European Telecommunications Standards Institute (ETSI) –Technical Committee on Electronic Signatures and Infrastructures (TC ESI) Policy Requirements, Technical Standards
 See https://portal.etsi.org//TBSiteMap/ESI/ESIActivities.aspx

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 7

eIDAS
Agenda Recap – eIDAS, Trust Services, Standardization
 Signature Creation
 Time Stamping Outlook

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 8

eIDAS – Signature Creation
QSCD – Qualified Signature Creation Devices

 Protection Profiles
 EN 419211-x Protection profiles for secure signature creation device (SSCD) Target devices: smartcards

 EN 419221-x Protection Profiles for TSP cryptographic modules
 Target devices: Hardware Security Modules (HSM) Procedure to follow: CC evaluation, then notification
 Compilation of Member States notification on SSCDs and QSCDs
 https://ec.europa.eu/futurium/en/content/compilation-member-states-notification-sscds-and-qscds
 Designated Bodies under Article 30(2) and 39(2) of Regulation 910/2014
 Certified Qualified Signature Creation Devices under Article 31(1)-(2) and Certified Qualified Seal Creation
Devices under Article 39(3) of Regulation 910/2014,
 Secure Signature Creation Devices benefiting from the transitional measure set in article 51(1) ofRegulation 910/2014

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 9eIDAS - Signature Creation
EN 419221-x Protection Profiles for TSP cryptographic modules

 EN 419221-2 Cryptographic module for CSP signing operations with backup
 Update to former Protection Profile CWA 14167-2:2004 “CMCSOB-PP”

 EN 419221-4 Cryptographic module for CSP signing operations without backup
 Update to former Protection Profile CWA 14167-4:2004 “CMCSO-PP”

 prEN 419221-5 Cryptographic Module for Trust Services
 New Protection Profile Version 0.15 certified
 http://www.commoncriteriaportal.org/files/ppfiles/ANSSI-CC-PP-2016_05%20PP.pdf

 Version 1.0
 Integrates comments from CEN enquiry
 Process for publication as official EN document started
 Maintenance re-certification immediately after EN publication

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 11

eIDAS - Signature Creation
prEN 419221-5 Cryptographic Module for Trust Services

 CC conformance claim
 EAL4+
 Augmentation results from AVA_VAN.5 Advanced methodical vulnerability analysis

 Scope “… suitable for use by trust service providers supporting electronic signature and electronic
sealing operations, certificate issuance and revocation, time stamp operations, andauthentication services …”

 PP Overview
 “… generates and/or protects secret keys and other sensitive data, and allows controlled use of
these data for one or more cryptographic services in support of TSP trust services …”

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 12

eIDAS - Signature Creation
prEN 419221-5 Cryptographic Module for Trust Services (cntd.) TOE Overview
 “Authorisation as a user of a secret key is always separately required before a key can be used
in a cryptographic function …”
 “Re-authorisation conditions such as determining a time period or number of uses of a key …”

 Usage and major security features of the TOE
 “The threat environment the TOE is designed for is one of high threat of network compromise,and low threat of physical compromise …”
 Reduced requirements for side channel resistance and tamper protection

 Security Management
 “… two separate types of keys are defined: Assigned Keys … and general keys …”
 Assigned keys support sole control
 No import, no export Administrator cannot change authorization data, or set new authorization data when unblocking key
Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 13

eIDAS - Signature Creation
How Utimaco HSMs support prEN 419221-5

 CryptoServer Se-Series Gen2 evaluation acc. prEN 419221-5 in progress Target of evaluation
 PCIe plug-in card, w/ and w/o hardware crypto accelerator
 May be operated in CryptoServer LAN
 All performance grades covered by certification CXI interface adapted to PP requirements
 Supports PKCS#11, JCE, etc. with limitations

 Certification expected by end of Q1 CY2018

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 14

CryptoServer CP5
Main Features in a Nutshell

 PCIe card w/ and w/o crypto accelerator

 General purpose host APIs
(with limitations as mandated by PP)

 4 different performance levels
 16 RSA2048 sig/s .. 3200 RSA2048 bulk
sig/s (via PKCS#11)
 Preliminary benchmark results on request

 CXI
 PKCS#11
 (JCE) Can be operated in CSLAN appliance Internal key storage
 Extensible: per-key backup/restore
supported Host APIs for assigned keys
(initialization, authorization, unblocking) C, Java, byte buffer Initialize existing keys
(imported or generated via host APIs) Keys referenced via handle(based on group/name/specifier)

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 15

CryptoServer CP5
Main Features in a Nutshell (cont’d) Full-featured Utimaco tool supportAdministration tools: csadm, CAT
PKCS#11: p11tool2, P11CAT
General purpose command line tool (key mgmt. + cryptography): cxitool
HSM simulator

 Supports Remote Server Signing acc. EN 419 241
Remote Server Signing Trust Service Provider
QSCD – Tamper protected environment

Local
Signing
Application

ServerSigning
Application(SSA)

Signature
Activation
Module(SAM)

Protection Profile
EN 419241-2
Utimaco HSM Business Unit · Aachen, Germany · ©2017

Cryptographic
Module(HSM)

Protection Profile
EN 419221-5

Utimaco eIDAS Update, June 2017

Page 16

CryptoServer Simulator
Proven Features

Host Platforms

 Fully-functional simulation model Windows
 Linux

 Cryptography Administration
 Integrations

 … everything Also part of the SDK package
 Your code running on the HSM
 Develop, run, and debug code on thesimulator

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 17

Administration Tools
Overview
 Three administrative tools available
 Command line tool csadm
 GUI tool
CryptoServer Administration Tool (CAT) Administration via front panel(only for CryptoServer LAN)

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 18

Utimaco PKCS#11
Admin tools GUI tool (Java based):
PKCS#11 CryptoServer Administration Tool (P11CAT)
 CLI tool:
p11tool2
 For 32-bit and 64-bit
 For Windows and for Linux (no AIX tools)

 Note: Non-standard functionality requires usage of thegeneral admin tools (CAT/csadm), for example
 Unconventional user naming Two-person-rule Key manager role

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 19

Utimaco PKCS#11
Features Functional

 Security

 Configurable number of PKCS#11 slots
per CryptoServer Clustering Connection-based load balancing(Least Connections) Failover Up to 4096 parallel sessions per
CryptoServer

Utimaco HSM Business Unit · Aachen, Germany · ©2017 Secure channel between application and
CryptoServer
 Multiple authentication mechanisms
supported
 Configurable m out of n authentication
 Segregation of key management andusage rights
 Interface hardening Failed login counter Thread-safe for use in multithreaded
applications

Utimaco eIDAS Update, June 2017

Page 20

Utimaco PKCS#11
Admin tools GUI tool (Java based):
PKCS#11 CryptoServer Administration Tool (P11CAT)
 CLI tool:
p11tool2
 For 32-bit and 64-bit
 For Windows and for Linux Note: Non-standard functionality requires usage of thegeneral admin tools (CAT/csadm), for example
 Unconventional user naming Two-person-rule Key manager role

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 21

eIDAS - Signature Creation(Remote) Server Signing eIDAS motivation (51):“It should be possible for the signatory to entrust qualified electronic signature creation
devices to the care of a third party, provided that appropriate mechanisms and procedures
are implemented to ensure that the signatory has sole control over the use of hiselectronic signature creation data, and the qualified electronic signature requirements are
met by the use of the device.” Similar handling for electronic seals

 EN 419241 Trustworthy Systems Supporting Server Signing Part 1: General System Security Requirements
 CEN enquiry in progress, results expected until June 22

 Part 2: Protection Profile for QSCD for Server Signing CEN enquiry in progress, results expected until August 3
 Common Criteria evaluation pending, results expected until June 30

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 22

eIDAS - Signature Creation
EN 419241 Trustworthy Systems Supporting Server Signing

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 23

eIDAS - Signature Creation
prEN 419241-2 QSCD for Server Signing CC conformance claim
 EAL4+
 Augmentation results from AVA_VAN.5 Advanced methodical vulnerability analysis

 Scope “… specifies a protection profile for a Signature Activation Module (SAM), which is aimed tomeet the requirements of a QSCD …”

 TOE Overview
 “To ensure the signer has sole control of his signing keys, the signature operation needs to beauthorised. This is carried out by a Signature Activation Module (SAM), which can handle one
endpoint of SAP, verify SAD and activate the signing key within a Cryptographic Module. Both
the Cryptographic Module and the SAM are to be located within a tamper protectedenvironment. ”

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 24

eIDAS - Signature Creation
prEN 419241-2 Tamper Protected Environment Common tamper protected environment SAM runs within the tamper protected environment
provided by the cryptographic module

Tamper protected env. QSCDSAM

 + Use tamper protected environment of crypto module – Strong dependence on crypto module
implementation and certification

 Separate tamper protected environments
 SAM runs within its own tamper protected environment

Tamper protected
env. SAM

Tamper protected
env. SCDev

 + Crypto module can be used as certified,also for other trust services than server signingSAM

 – Tamper protection must be covered duringcertification of SAM

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 25

eIDAS - Signature Creation
How Utimaco HSMs support EN 419241

 CryptoServer Se-Series Gen2 evaluation acc. prEN 419221-5 in progress Basis for server signing systems acc. EN 419241

 Utimaco supports manufacturer / integrator of server signing system
 Common tamper protected environment
 CryptoServer SDK for firmware development
 Advice for certification of SAM

 Separate tamper protected environments
 Advice for tamper protected SAM environment
 Integration support for CryptoServer Se-Series Gen2
and CXI interface

 No plans to develop and certify a Utimaco server signing solution

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 26

eIDAS
Agenda Recap – eIDAS, Trust Services, Standardization
 Signature Creation
 Time Stamping Outlook

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 27

eIDAS – Time Stamping
prEN 419231 – Protection Profile prEN 419231 Protection Profile for trustworthy systems supporting time stamping Status
 CC evaluation in progress, results expected until June 30
 CEN enquiry in progress, results expected until June 22
 Consolidation in version 1.0 for official publication
Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 28

eIDAS – Time Stamping
prEN 419231 – Cryptographic Module The cryptographic module … is a certified device that meets: the requirements of [EN319421] §7.5.2 or [ETSI102023] §7.2.2 or equivalent or the following: meets the requirements identified in ISO/IEC 19790, level 3 or higher;
NOTE : Demonstrated conformance to FIPS PUB 140-2, level 3 is considered as fulfilment of thisrequirement.
 meets the requirements identified in [CEN TS 419 221-2] or [CEN TS 419 221-4] or [CEN TS 419 221-5];or is a trustworthy system which is assured to EAL 4 or higher in accordance to ISO/IEC 15408, or
equivalent security criteria. This shall be to a security target or protection profile which meets therequirements of the present document, based on a risk analysis and taking into account physical andother non-technical security measures.

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 29

eIDAS – Time Stamping
prEN 419231 – Cryptographic Module The cryptographic module … is athat meets: the requirements of [EN319421] §7.5.2 or [ETSI102023] §7.2.2 or equivalent or the following: meets the requirements identified in ISO/IEC 19790, level 3 or higher;
NOTE : Demonstrated conformance tois considered as fulfilment of thisrequirement.
 meets the requirements identified in [CEN TS 419 221-2] or [CEN TS 419 221-4] or [or
 is a trustworthy system which is assured to EAL 4 or higher in accordance to ISO/IEC 15408, or
equivalent security criteria. This shall be to a security target or protection profile which meets therequirements of the present document, based on a risk analysis and taking into account physical andother non-technical security measures.

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 30];

eIDAS – Time Stamping
How Utimaco HSMs support prEN 419231

 “… is a certified device that meets …”
 FIPS PUB 140-2, level 3
 CryptoServer Se-Series, Se-Series Gen2 and CryptoServer CSe-Series

 CEN TS 419 221-5
 CryptoServer Se-Series Gen2 in progress CryptoServer Se-Series Gen2 advantages
 Support for multi-tenancy and multiple keys per tenant A single HSM supports multiple time stamp server

 Same HSM can be used for time stamping, certificate services, server signing, etc.
 Simplified system setup for TSPs providing time stamping and signature creation services

 Broad portfolio
 From low performance entry-level to high-performance w/ embedded crypto accelerator

 CryptoServer Se50 deployed by German qualified time stamp service provider
Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 31

eIDAS
Agenda Recap – eIDAS, Trust Services, Standardization
 Signature Creation
 Time Stamping Outlook

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 32

eIDAS – Outlook
Other Trust Services

 Signature validation
 ETSI is working on policy requirements, protocols and standards
 Stable drafts expected in Q4 2017
 Official publications in 2018
 CEN will contribute security requirements and/or Protection Profiles as needed Electronic registered delivery / mail
 Idem Long-term preservation
 ETSI published study report SR 019500 in May
 Next steps to be defined

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 33

eIDAS – Outlook
Worldwide impact

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 34

eIDAS – Outlook
Worldwide impact

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 35

eIDAS – Outlook
Worldwide impact

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 36

eIDAS – Outlook
Worldwide impact

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 37

eIDAS – Outlook
Worldwide impact

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 38

eIDAS – Outlook
Utimaco Product Roadmap

 CryptoServer Se-Series Gen2 CC
 Certification expected in Q1 2018

 TimestampServer 3.00
 Major upgrade to support
 CryptoServer running in FIPS / CC mode Integrated GPS receiver, alternatively GLONASS or DCF77

 CC certification acc. EN 419231 under investigation

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 39

Thanks for your attention
Thorsten Groetker
CTO
thorsten.groetker@utimaco.com

Utimaco IS GmbH

Utimaco Inc.

Germanusstraße 452080 Aachen
GermanyTel +49 241 1696 200
Fax +49 241 1696 199
Email hsm@utimaco.com

Suite 150
910 E Hamilton Ave
Campbell, CA 95008
United States of America
Tel +1 844 884 6226
Email hsm@utimaco.com

Utimaco HSM Business Unit · Aachen, Germany · ©2017

Utimaco eIDAS Update, June 2017

Page 40