Background

To comply with cybersecurity regulations and Classified Protection and Cryptography Assessment (CPCA) requirements, information systems rated Level-3 and above must use cryptographic products certified at Level-2 or higher to protect critical infrastructure and personal data.

• Current cryptographic solutions primarily rely on hardware security modules (HSMs) and cryptographic cards. However, the decoupled architecture of HSMs results in high latency in key management and cryptographic operations, and cryptographic cards face issues like poor stability and complex deployment.
• To address these challenges, the Kunpeng solution has optimized commercial cryptography application by using the Huawei-developed hardware platform and the highly secure iTrustee OS. This Kunpeng solution provides the GM/T 0018 Secure Device Format (SDF) APIs and a certified cryptographic module for security validation, ensuring compliance with cybersecurity classified protection. Furthermore, partners can integrate this cryptographic module into their products (such as server HSMs, signature and verification servers, and SSL/VPN gateways) to achieve cryptographic product certifications.