Where specialist capabilities connect
Explore how ConSec’s capabilities apply to Digital Key, cryptographic infrastructure and digital identity. These examples outline possible engineering scopes, from individual components to the interfaces that connect them.
Digital Key
Context: Automotive access and start authorization
Digital Key systems connect device applications, secure elements, vehicle systems and supporting services. Engineering requirements can span authentication, applet behavior, communication interfaces and integration across supplier components.
ConSec can support security concepts, requirements and specifications, Java Card application development and testing, and integration of the relevant software components. Scope can include device- and vehicle-side applets based on CCC Digital Key specifications and NFC-related interfaces.
Possible scope:
- Security concepts and authentication-protocol review
- Java Card applet and test-suite development
- Embedded-software and platform integration
- Requirements, interface specifications and technical reviews
Outputs can include: Specifications, applets, test suites and integration documentation.
HSM integration and provisioning
Context: Cryptographic infrastructure and production systems
An HSM must fit the applications and workflows around its cryptographic boundary. Host APIs, administration, key-management operations and production tooling all contribute to that integration.
ConSec brings integration experience with PKCS#11, JCA / JCE, CNG / KSP, OpenSSL Engine / Provider and REST APIs. Platform experience includes on-premise Utimaco (u.trust, CryptoServer) and Thales (Luna) HSMs, as well as AWS CloudHSM and Google Cloud HSM. Interfaces are selected for the target platform and application.
Our work covers host software, firmware components and cryptographic interfaces. For provisioning workflows, we connect key-management concepts with the scripts and software used in personalization environments.
Possible scope:
- Host-software and firmware-component development
- Cryptographic API integration and testing
- Administration and diagnostic tooling
- HSM-aware provisioning concepts and production integration
Outputs can include: Interface components, tools, integration tests and provisioning concepts.
Identity & Authentication
Secure elements protect keys and run identity and authentication applets in classical smart cards, tokens and smart devices. ConSec brings development, testing and integration experience with FIDO U2F, FIDO UAF, FIDO2, PIV and other PKI applets such as GIDS.
PKI management applications, browsers and other tools and apps access these devices through appropriate host interfaces. PKI integration includes PKCS#11 middleware and Windows CSP/CNG. FIDO follows protocol-specific integration paths, including WebAuthn and CTAP for FIDO2. The connection depends on the device, applet and target system.
Possible scope:
- Secure-element applet development and testing
- Credential, certificate and card-profile handling
- Middleware integration through PKCS#11 and CSP/CNG, alongside FIDO integration
- Integration testing with PKI management applications, browsers and other host applications
Outputs can include: Applets, middleware components, interface tests and technical documentation.
Which application are you developing?
Describe the platform, interfaces and support you need. We can use that context to discuss a relevant contribution.