Reference Guide

2 Introduction
RSA BSAFE Crypto-C Micro Edition 4.1 Security Policy
Level 1
1 Introduction
The Crypto-C ME software development toolkit is designed to enable developers to
incorporate cryptographic technologies into applications. Crypto-C ME security
software helps to protect sensitive data as it is stored, using strong encryption
techniques to ease integration with existing data models. Using the capabilities of
Crypto-C ME software in applications helps provide a persistent level of protection
for data, lessening the risk of internal, as well as external, compromise.
Note: In this document, the term cryptographic module, refers to the
Crypto-C ME FIPS 140-2 Level 1 validated cryptographic module.
1.1 References
This document deals only with the operations and capabilities of the Crypto-C ME
cryptographic module in terms of a FIPS 140-2 cryptographic module security policy.
For more information about Crypto-C ME and the entire RSA BSAFE product line, see:
• Information on the full line of RSA products and services is available at
www.emc.com/domains/rsa/.
• RSA BSAFE product overviews are available at
www.emc.com/security/rsa-bsafe.htm.
• Answers to technical or sales related questions are available at
www.emc.com/support/rsa/.
1.2 Document Organization
This Security Policy explains the cryptographic module's FIPS 140-2 relevant features
and functionality. This document comprises the following sections:
• This section, “Introduction” on page 2 provides an overview and introduction to
the Security Policy.
• “Crypto-C ME Cryptographic Toolkit” on page 3 describes Crypto-C ME and
how it meets FIPS 140-2 requirements.
• “Secure Operation of Crypto-C ME” on page 22 specifically addresses the
required configuration for the FIPS 140-2 mode of operation.
• “Services” on page 27 lists the functions of Crypto-C ME.
• “Acronyms and Definitions” on page 33 lists the acronyms and definitions used in
this document.
With the exception of the non-proprietary RSA BSAFE Crypto-C Micro Edition 4.1
Level 1 Security Policy, the FIPS 140-2 validation submission documentation is EMC
Corporation-proprietary and is releasable only under appropriate non-disclosure
agreements. For access to these documents, please contact RSA.