San Francisco (January 12, 1998) -- Digital certificate technology, encryption
toolkits, and firewall software were among the many announcements made by
companies here at the RSA Data Security Conference today.
- Sun Microsystems Inc. announced it is bundling its firewall, remote access,
and server security applications into a package called SunScreen Secure Net
that will provide security throughout the enterprise network for $9,995
for unlimited nodes, or $2,999 for 100 nodes. It will be available in March
on Solaris, SPARC, or Intel and supports Microsoft Windows 95 clients and
Windows NT nodes. The package includes new versions of SunScreen EFS 2.0
with a Java-based graphical user interface; SunScreen SKIP which offers
client cryptography; and Sun Security Manager 4.4 host security system. Sun
also announced a new global Security Consulting Practice for customers.
- Sun subsidiary JavaSoft Inc. also announced the release of its latest Java
Cryptography Extension software package (JCE 1.2) which can be downloaded
for free from http://java.sun.com/jdc/ by users in the U.S. and Canada. JCE
1.2 creates a set of APIs (application programming interfaces) which provide
permission-based access control of Java applets and applications and include
symmetric cipher technology and key agreement technology. Permission-based
access control enables users to specify from which end-users, whether local
or remote, Java applications will be accepted.
- IBM announced Global Sign-On for Multiplatforms version 1.5 which provides
users with a single sign-on point of entry for all their network and
computing resources. It features support for Tivoli's TME 10 for systems
management and Lotus Notes, PeopleSoft and OS/400 applications, as well as
server support for Windows NT and Sun Solaris, and client support for
Windows 95. The Global Sign-On for Multiplatforms 1.5 will be available January
30 at $99 per user or $1,999 per server.
- Symantec Corp. announced Norton Your Eyes Only Version 4.1 for Windows 95
and Windows NT, which offers on-the-fly encryption which automatically
decrypts files when users open them and re-encrypts them when the files are
saved or closed. The software also provides users with the ability to
prevent unauthorized end-users from accessing the system by booting up from
a floppy or hard disk without using a valid password, and it blanks the
screen and blocks access to the system after a set period of inactivity.
Norton Your Eyes Only 4.1 for Windows 95 and Windows NT will be available in
mid-February for $89.95.
- The International Computer Security Association (ICSA), formerly the
National Computer Security Association, has awarded certification to Norton
Your Eyes Only, and will use testing tools developed by TimeStep Corp. to
begin certification of IPSec solutions.
- TimeStep Corp. announced that its firewall appliance is shipping. Permit
2505 or Permit 4505 is a combination of TimeStep's hardware gateway and
CheckPoint Software Technologies Inc.'s FireWall-1. The appliances are
priced from $4,995 to $10,995. The FireWall-1 management console is $11,995.
- Entrust Technologies Inc. has agreed to a joint development,
cross-licensing and distribution agreement with Symantec that will result in
secure desktop suites based on technology from both companies. Entrust will
include in its Secure Enterprise Desktop Solution Symantec's Norton Your
Eyes Only and Norton AntiVirus software. Symantec will license Entrust's
public-key infrastructure technology for use with those products, as well as
for the Norton Secure Desktop Suite. Additionally, Entrust will incorporate
into its EntrustFile Toolkit Symantec's Norton AntiVirus API and Symantec
will bundle Entrust/Solo digital signature software with its Norton
AntiVirus Deluxe software. Meanwhile, Entrust also unveiled Entrust
InSource, a new service to help corporate users operate their Entrust public
- ValiCert Inc. announced that Baltimore Technologies Ltd. will incorporate
ValiCert's certification validation technologies ValiCert Server into its
UniCERT products, as well as integrate the ValiCert Toolkit into
applications. ValiCert also announced that it has expanded its global field
trials of its ValiCert Service for checking the validity of digital
certificates to include Baltimore Technologies, Entegrity Solutions, Entrust
Technologies, GTE CyberTrust and Xcert International Inc. Initial trials
were announced last year with certificate authorities Belsign in Europe and
Thawte in South Africa and the U.S.
- Baltimore Technologies announced plans to use IBM's SecureWay KeyWorks
toolkit to add support for key recovery technology in its MailSecure
products. The firm also announced the availability of its Secure Messaging
Toolkit for around $325 per developer and $70 per user.
- VeriSign Inc. introduced four new public-key infrastructure software
modules as part of its suite of software and services for securing networks
using digital certificates. The four modules are Automated Authentication
Manager, Automated Lifecycle Manager, Secure Server Manager and Smart
Card/Key Manager. Also, British Telecommunications PLC announced plans to
introduce a range of digital certificate services under an agreement with
VeriSign. BT will establish a certification authority in the U.K. to
authenticate and manage digital certificates.
- Finjan Inc. introduced SurfinSuite which it claims is the first Java and
ActiveX security software to link desktop and gateway mobile code security
into an all-in-one suite. SurfinSuite allows users to control Java, ActiveX,
that try to enter the network. It offers content inspection and smart
filtering at the gateway, as well as customizable security for the entire
enterprise or for each user.
- Security Dynamics Technologies Inc. announced its SecurSight family of
software that includes SecurID authentication, and the SecurSight Desktop,
Manager, Agents, and Agent Toolkit. The products are scheduled to roll out
through 1998 in two major releases. Version 1.0 of the SecurSight Desktop,
Manager, Agents, and Agent Toolkit is expected to be available in the second
quarter of this year, while Version 2.0 of the integrated SecurSight product
family is expected to be available in the fourth quarter of 1998.
- GTE Corp. and Hewlett-Packard Co. announced plans to collaborate on
public-key infrastructure-based products and services. The combined
offerings will feature the GTE CyberTrust Certificate Management System
(CMS), for certifying digital certificates, running on HP-UX and HP 9000
enterprise servers. The CyberTrust CMS will be available for HP-UX in the
second quarter of 1998. Meanwhile, GTE announced GTE CyberTrust Solutions
which includes certification authority hardware, software and professional
- Phoenix Technologies Ltd. announced a preboot security technology, Phoenix
Preboot System Security Technology, for original equipment manufacturers
(OEMs). The company also released its Preboot Crypto API which describes how
the BIOS and other preboot agents can interface with the new technology. In
addition, Phoenix will work with RSA Data Security Inc. to embed industry
standard crypto technologies on the motherboards of PCs from major OEMs.
- RSA Data Security Inc. unveiled plans to release a Certificate Security
Suite of components and tools in the second quarter of 1998. The suite is
designed to provide commercial and corporate developers with easy-to-use
code modules and APIs for popular security features, such as digitally
signed and encrypted data, authentication and digital certificate issuing
and managing. Later in the year, RSA will offer its S/Mail software as an
extension to the Certificate Security Suite. Meanwhile, RSA launched a field
trial of the latest version of its BSafe toolkit and encryption engine which
includes elliptic curve technology. The company also announced agreements
with IBM and Security Dynamics to offer customers a range of security
products and to work on joint development of technology and cross-marketing.
- Litronic Inc. announced it has received U.S. government approval to export
NetSign as a 1,024-bit identification and authentication product and is
enabling NetSign to provide smartcard-based security for Netscape
Communicator customers worldwide. Litronic also announced the release of its
NetSign Pro which features smartcard integration with desktop file
encryption, remote access and secure Windows NT logon. In addition, Litronic
launched Litronic Security Management Center to offer corporations the
ability to create, administer and restore key pairs and certificates onto
- Rainbow Technologies Internet Security Group announced that CryptoSwift
accelerates RSA Data Security's S/Pay toolkits for Secure Electronic
Transactions (SET) and the CryptoSwift accelerator board reduces processing
time for SET transactions. Rainbow also announced plans to work with
VeriFone Inc. so that the computationally intensive public-key SET
transactions in VeriFone's vPOS point-of-sale merchant software can be
offloaded to a dedicated processor.
- Atalla, a Tandem company, introduced a new hardware-based CSP
(Cryptographic Service Provider) product for the Microsoft CryptoAPI
environment. The Atalla TrustMaster CSP is a PCI expansion card and
dedicated security engine that offloads security tasks and manages private
keys for Windows NT 4.0-based applications. It will sell for $4,995 and ship
in the first quarter of 1998. Meanwhile, GlobeSet Inc. announced that its
SET software supports hardware cryptography by using Atalla's PayMaster/PCI
Internet Security Processor to handle large volumes of concurrent
- Security-7 Software Ltd. announced UltraGate which protects enterprise
networks from hostile active content downloaded from Java and ActiveX
applications. It features agent detection and enforcement at the gateway,
operating system hooking to restrict file and network access and the ability
to specify a policy for each workstation. UltraGate 1.0 will be available in
the first quarter of 1998 with pricing starting at $1,990 for 25
workstations to $8,990 for unlimited workstations. The company also released
the latest version of its SafeGate software for protecting against harmful
downloaded applications. SafeGate 1.2 incorporates the CheckPoint FireWall-1
software, Java 1.2 language filtering, enhanced security administration and
digital signature support. SafeGate 1.2 will be available Jan. 26 for
Windows 95 and Windows NT with pricing starting at $1,990 for up to 25
workstations to $8,990 for unlimited workstations.
- PostLinear Entertainment announced the incorporation of Transactor
Networks, a new company to develop technologies for the electronic commerce
of "digital objects," or objects that exist only in the digital realm such
as component software, Java applets and services, digital coupons, tickets
and music. Transactor Networks Inc. will ship its first suite of object
commerce tools for developers in the first quarter of 1998.
- NCipher Inc. introduced the nFast/KM line of cryptographic accelerators
which will allow the secure storage of crypto keys and boost the performance
of certificate servers. The nFast/KM product manages secure access, stores
crypto keys and access control lists and manages key generation, storage and
- LJL Enterprises Inc. announced its new line of ArmorWare Public-Key
Infrastructure components which track existing and proposed standards for
certification, messaging, security algorithms and tokens.
- C2Net Software Inc. announced the Stronghold Crypto Engine for Windows NT
which replaces the crypto system of Microsoft Corp.'s Internet Information
Server (IIS). It boosts the level of security for non-U.S. Web sites running
IIS because C2Net develops its products outside the U.S. where export
restrictions on encryption are among the strictest worldwide.
- CBT Systems announced the formation of the Internet Security Courseware
Consortium (ISCC) to provide training for users on security technology.
Companies participating in the ISCC include CheckPoint Software, Cisco
Systems Inc., IBM, Intel Corp., JavaSoft, Lotus Development Corp., Netscape
Communications Corp., Network Associates, RSA Data Security, Security
Dynamics and VeriSign.
If you have technical problems with this magazine, contact