CPE

CPE

1. Cryptographic Processing Engine

2. All security sensitive operations are performed within it

3. Maintains a list of KEK (Key Encryption Keys)

4. Not responsible for Storage

5. outside it sensitive assets are always encrypted

6. needs to be "hardened" by MPA Devel Team

   • Code Obfuscation
   • Data obfuscation
   • constants encryption

7. APIs

   • Database Crypto API
     • used by DB Component
     • Confidentiality and Integrity
     • protect data "at rest"
   • Remote Mgnt Crypto API
     • Used by Remote Mgmt to process CMS-D messages
   • MChipEngine Crypto API
     • Provide crypto services for MChipEngine Component
   • Key Management API
     • Manage the KEKs maintained in the CPE
     • Flexible API
       • Symmetric Algorithms
       • Asymmetric Algorithms
         • preferred
     • implementation must..
       • prevent recovery of KEKs during security evaluation
       • keys are unique for each device
       • keys are independent
       • assets should not be recovered during security evaluation
         • Using obfuscated formats to decrypt assets
         • Minimize the time assets are in memory
         • preventing debugger analysis during sensitive operations
   • Wallet Data Crypto API
     • Used by Wallet to encrypt data passed to SDK