Posts Tagged ‘nanossl’

ClearCube Secures Centralized Computing Solutions with Mocana

Tuesday, July 13th, 2010

San Francisco, CA (PRWEB) July 14, 2010
Mocana Corporation, a company that focuses on securing networked devices, today announced that ClearCube Technology, Inc. has licensed its NanoSSH and NanoSSL technology to securely manage its centralized and virtualized computing solutions. ClearCube’s solutions allow users to integrate powerful PC blade technology, cutting edge user access devices and expert professional services to give organizations comprehensive, high performance centralized computing and virtual desktop solutions. With a growing proportion of enterprise business being done on client side devices in centralized/virtualized environments, secure management is critical.

Mocana’s NanoSSH and NanoSSL are embedded in ClearCube’s Remote Management Module (RMM) in the chassis, centralized in a remote datacenter, to secure all communication between the RMM and ClearCube’s Sentral management software suite. Sentral and the RMM provide a wide range of management functions for virtual machines, centralized PC blades, servers, chassis, and more. Mocana’s technology will help organizations leverage the power and flexibility of ClearCube’s Centralized and Virtualized solutions while securing the management channels.

NanoSSL is Mocana’s SSL/TLS solution designed to speed product development while providing best-in-class device security in resource-constrained environments like the thin clients used by ClearCube. NanoSSL is open-standards-based, extensible, platform-agnostic and includes an optional government-certified FIPS 140-2 level-1- validated crypto core. NanoSSL includes a full-featured key generator and certificate management client, and supports government Suite B crypto algorithms and the new RFC standard for TLS 1.2.

NanoSSH is Mocana’s SSH client/server solution with support for X509.v3 certificate-based authentication and comes with RADIUS client, specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments. NanoSSH provides a holistic approach for securing networked devices and services, and is ideally suited for resource-constrained devices as well as high-traffic enterprise and federal environments where performance is critical. NanoSSH is open-standards-based, extensible, extremely small footprint, platform-agnostic and features an optional government-certified FIPS 140-2 level-1-validated crypto core.

Both NanoSSH and NanoSSL solutions are GPL-free, so developers can feel confident about the long-term integrity of their intellectual property. New developers can request a free trial of Mocana products at www.mocana.com. “ClearCube’s model is helping to lead the shift towards centralized and cloud computing, but with appropriate care taken for device security,” said Adrian Turner, CEO of Mocana. “The addition of heterogeneous client-side devices to this model adds another dimension to the security challenge. That’s why ClearCube is using Mocana, to make sure that today’s most flexible centralized computing architectures are safe for mission-critical users, like those in government. ”

“One of the key value propositions of our centralized and virtualized solutions is our ability to keep the management of the different components in the system simple and secure”, said Raj Mellacheruvu, Director of Engineering at ClearCube Technology. “With Mocana’s technology we are able to securely communicate with our remote management modules over the network.”

About Mocana

Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

REDCOM Picks Mocana to Secure Carrier Class 4/5 IP Softswitch Solutions

Tuesday, December 8th, 2009

pic5-27Victor, N.Y. and San Francisco (November 24, 2009)‚ REDCOM Laboratories Inc., a company that designs and manufactures digital and IP-enabled telecommunications systems, today announced a technology partnership with Mocana to secure REDCOM’S TRANSip® IP technology suite. REDCOM announced an agreement to integrate Mocana’s NanoSSL™ Advanced™ device integrity software to implement secure SIP over TLS and to encrypt remote administration of REDCOM HDX and SLICE® 2100™ softswitches. Mocana’s security technology embedded within these REDCOM platforms protects users from eavesdropping, data theft and VoIP man-in-the-middle attacks by encrypting content and authenticating endpoints at carrier-class traffic volumes and speeds.

TRANSip is a Mocana-secured, fully integrated VoIP and TDM solution available for the REDCOM HDX and SLICE 2100 Carrier Class 4/5 softswitch platforms that incorporates the benefits of TDM and IP technologies. TRANSip provides a SIP Call Controller, Media Gateway, Media Gateway Controller, and a full range of related IP telephony capabilities and features. TRANSip also supports traditional TDM transport and signaling interfaces and features.

NanoSSL is Mocana’s super fast, super small SSL/TLS solution specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments. NanoSSL is open-standards based, extensible, extremely small footprint, platform-agnostic and includes an optional government-certified FIPS 140-2 level one-validated crypto core. NanoSSL includes a full-featured key generator and certificate management client, and even supports Government Suite B crypto algorithms and the new RFC standard for TLS 1.2. Free source code evaluations of NanoSSL are available to developers at www.mocana.com/evaluate.html.

“Our customers demand robust security from our IP-based switch platforms,” said Klaus Gueldenpfennig, President of REDCOM. “They also expect very high throughput and high availability. Mocana’s government-certified cryptography software stood out head and shoulders above the rest. Their stellar engineering support and embedded security expertise made Mocana an easy choice when we went looking for a security partner.”

“REDCOM’s TRANSip incorporates a full VoIP and TDM feature set in a single Next Generation Network platform, coupling REDCOM’s world-renowned reliability with best-in-class Mocana device security,” said Adrian Turner, Mocana’s President and CEO. “TRANSip offers their customers all the ROI benefits of secure VoIP while still leveraging customers’ substantial investments in existing network elements.”

For more information about REDCOM’s HDX and SLICE 2100 with TRANSip, please email sales@redcom.com or call 1.585.924.7550. For more information about Mocana’s NanoSSL software, visit www.mocana.com/nanossl.html or call 415.617.0055.

About REDCOM
For more than 30 years, REDCOM has specialized in the design and manufacture of innovative telecommunications products noted for their quality and reliability. REDCOM products provide customers with state-of-the-art public and private network systems, ISDN systems, integrated TDM and VoIP systems, transportable systems, programmable systems, and test equipment.

Located in Victor, New York, REDCOM markets to a global customer base including commercial telecom service providers, private networks, integrators, emergency responders, and government and defense agencies, customizing products to meet each market’s specific needs. All REDCOM products are proudly designed, manufactured and assembled in the United States.

About Mocana
Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PCs on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Nortel Networks, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

MOCANA CASE STUDY:
Securing CPU Tech’s Acalis Sentry

Tuesday, November 3rd, 2009

pic2-23Nowhere is device security more crucial than in Defense applications. The mission-critical requirements of defense settings demand a fully integrated security architecture, built from the ground up.

Mocana customer CPU Tech, a leader in secure processing solutions for defense, has recently announced Acalis Sentry. This software/hardware combination encrypts embedded software and manages internal security settings for their Acalis CPU872, the first commercially available trusted embedded processor that addresses the anti-tampering requirements of military and commercial systems, as defined by U.S. Department of Defense (DoD) Instruction 5200.39.

CPU Tech needed a system to authenticate connections between the client and Acalis Sentry Server, as well as issue and authenticate self-signed X.509 certificates. And because their product applications include secured embedded systems, it needed to be optimized for resource-constrained environments.

nanosslbox2They chose Mocana’s NanoSSL.

Mocana’s super fast, super small SSL/TLS solution was specifically designed to speed projects like CPU Tech’s while providing best-in-class security services for performance-critical environments. NanoSSL is open-standards based, extensible, configurable, easy to integrate, extremely small footprint and platform-agnostic. And the crypto core at the heart of NanoSSL is government-certified FIPS 140-2 level-1-validated — crucial to CPU Tech’s solution.

CPU Tech found that NanoSSL was actually going to be less expensive for them than OpenSSL, when engineering, testing and support costs were factored in — besides which, initial evaluations showed that OpenSSL would not be able to meet CPU Tech’s stringent performance requirements and long-term maintenance of FIPS certification. Another reason for CPU Tech’s selection was Mocana’s guarantee that NanoSSL contained no GPL code, so CPU Tech could be confident that their intellectual property wouldn’t accidentally become public domain because of “GPL contamination.” This “Trusted Source” software is a key value offering for Defense customers.

For more information about CPU Tech and its products, visit them at www.cputech.com, or click here.

MOCANA CASE STUDY:
Securing Radvisions Multiconferencing Unit

Monday, October 26th, 2009

pic5-22As videoconferencing becomes more widespread, even the most sensitive meetings are migrating online. Mocana customer Radvision knew it needed to do something to protect their government and commercial customers’ most sensitive videoconferences from hackers, interception and eavesdropping.

Radvision (NASDAQ: RVSN) is the industry’s leading provider of products and technologies for unified visual communications over IP and 3G networks. They offer one of the broadest sets of standards-based video networking technologies on the market today. Radvision is driving the unified communications revolution by combining the power of video, voice, data and wireless – in videoconferencing systems, mobile video solutions and highly scalable video-enabled desktop platforms for IP and next-generation cell networks.

Open-source security tools were considered, but the option was discarded because they were unsupported, unreliable and proved difficult to port to Radvision’s advanced, special-purpose platforms. Neither could they meet Radvision’s stringent performance requirements. Radvision also needed FIPS 140-2 level one validation for their core security libraries in order to address the needs of their most sensitive government and government-contractor customers – something open source couldn’t offer.

Radvision turned to Mocana, tightly integrating Mocana’s NanoSSL™ solution into the Radvision Multiconferencing Unit http://www.radvision.com/Products/Video-Products/MCUs/default.htm and the Radvision Gateway http://www.radvision.com/Products/Video-Products/Gateways/default.htm.

Mocana’s super fast, super small SSL/TLS solution was specifically designed to speed product development projects like Radvision’s while providing best-in-class device security services for performance-critical environments. Radvision loved NanoSSL’s open-standards based, extensible, extremely small footprint, platform-agnostic and government-certified FIPS 140-2 level-1- validated crypto core. Best of all, Radvision found NanoSSL to be surprisingly affordable: their total cost of ownership ended up being substantially less than what they had anticipated for open source, when engineering and support costs were included. And Mocana’s NanoSSL helped them get new, more secure versions of their products to market much faster than expected.

For more information about RADVISION and its products, visit them at www.radvision.com

Hints from Mocana Engineering

Friday, November 7th, 2008

Can I use OpenSSL certificate and keys with NanoSSL?

Yes. To convert an OpenSSL certificate to NanoSSL, simply convert the certificate from PEM to DER format by defining in your project __ENABLE_MOCANA_PEM_CONVERSION__; and then use the CA_MGMT_decodeCertificate() API to convert OpenSSL certificate to NanoSSL. To convert OpenSSL key to NanoSSL key, simply call: CA_MGMT_convertKeyDER() or CA_MGMT_convertKeyPEM() depending whether your key is stored as DER or PEM file. Note: PEM files are base64 encoded DER files.