NEWS

WIRES

OTHER

Thales announces support for and compliance with NIST SP 800-131A

Thales’s Industry Leading Hardware Security Modules support latest best practice recommendations for longer key lengths

RSA Conference, San Francisco, CA – February 14, 2011 – Thales, leader in information systems and communications security, announces that its range of hardware security modules (HSMs) fully supports the recently issued best practice recommendations for the use of cryptographic algorithms and key lengths as specified by the National Institute of Standards and Technology (NIST) SP 800-131A.

In response to the ever changing security landscape NIST has issued new guidance on the use of cryptography to ensure the privacy and integrity of sensitive information and messages. The updated recommendations define the algorithms and key lengths that are permitted for sensitive but unclassified Federal data and provide guidance on the longevity of the security offered by these schemes based on their best estimate of prevailing technology. Most importantly, the guidance warns against the continued use of certain algorithms and key lengths and encourages users to transition their applications over time to use stronger cryptographic keys and more secure algorithms, raising the security bar for would-be cyber criminals. Although these recommendations are only mandatory for US Government data - they serve to define the best practices for protecting commercial data worldwide.

Thales HSMs support the new NIST recommendations enabling users to fully comply with the new guidelines. Thales HSMs support the widest range of algorithms and key sizes and very importantly, are optimized to ensure that the performance impact of transitioning to use longer and therefore stronger keys has been minimized. HSMs have long been accepted as an industry best practice for protecting encryption keys because they overcome the inherent security weaknesses of managing and using keys in software.

“Thales has long championed the use of hardware protection for keys and the use of longer, more secure keys in business critical applications, and we are pleased that these best practices are becoming more widely recognised,” says Franck Greverie, Thales Vice President in charge of Information Technology Security activities. “Support for NIST SP 800-131A not only gives our customers the ability to adopt the best possible security practices in terms of key length but also minimizes the performance penalties that have traditionally accompanied the use of longer keys. This is another example of Thales meeting and exceeding industry and government recommendations to give our customers confidence that their investment in hardware-enforced security will be protected as technology, regulation and best practice continue to evolve.”

NIST, which is part of the U.S. Department of Commerce, is responsible for developing standards and guidelines, including minimum requirements, for providing adequate information security for all agency operations and assets for use by federal agencies. While the NIST recommendations are designed for federal agencies, they are generally accepted as standards to be adopted by non-governmental organizations worldwide.

Visit Thales (booth #2023) at the RSA Conference, Moscone Center, San Francisco, February 14-18, 2011

Visit our digital media centre www.keymanagementinsights.com for industry issues and comment.

Notes to editors

The Information Technology Security activities of Thales
Thales e-Security is a leading global provider of data encryption solutions to the financial services, high technology manufacturing, government and technology sectors.  With a 40-year track record of protecting corporate and government information, Thales solutions are used by four of the five largest energy and aerospace companies, 22 NATO countries, and they secure more than 70 percent of worldwide payment transactions.  Thales e-Security has offices in France, Hong Kong, Norway, United States and the United Kingdom.  For more information, visit www.thales-esecurity.com    

About Thales
Thales is a global technology leader for the Defence & Security and the Aerospace & Transport markets. In 2009 the company generated revenues of €12.9 billion, with 68,000 employees in 50 countries. With its 22,500 engineers and researchers Thales has a unique capability to design, develop and deploy equipment, systems and services that meet the most complex security requirements. Thales has an exceptional international footprint, with operations around the world working with customers as local partners. www.thalesgroup.com    

Press Contacts:
Zoe Gray
Hotwire
+44 (0)207 608 4641
Zoe.gray@hotwirepr.com

Liz Harris
Thales e-Security
+44 (0)1223 723612
liz.harris@thales-esecurity.com