Fortezza is an
information security
Information security is the practice of protecting information by mitigating information risks. It is part of information risk management. It typically involves preventing or reducing the probability of unauthorized or inappropriate access to data ...
system that uses the Fortezza Crypto Card, a
PC Card
PC Card is a technical standard specifying an expansion card interface for laptops and personal digital assistants, PDAs. The PCMCIA originally introduced the 16-bit Industry Standard Architecture, ISA-based PCMCIA Card in 1990, but renamed it to ...
-based
security token
A security token is a peripheral device used to gain access to an electronically restricted resource. The token is used in addition to, or in place of, a password. Examples of security tokens include wireless key cards used to open locked door ...
. It was developed for the U.S. government's
Clipper chip project and has been used by the U.S. Government in various applications.
Each individual who is authorized to see protected information is issued a ''Fortezza card'' that stores
private keys and other data needed to gain access. It contains an NSA approved security microprocessor called ''
Capstone'' (
MYK-80) that implements the
Skipjack encryption
In Cryptography law, cryptography, encryption (more specifically, Code, encoding) is the process of transforming information in a way that, ideally, only authorized parties can decode. This process converts the original representation of the inf ...
algorithm.
The original Fortezza card (KOV-8) is a
Type 2 product which means it cannot be used for
classified information
Classified information is confidential material that a government deems to be sensitive information which must be protected from unauthorized disclosure that requires special handling and dissemination controls. Access is restricted by law or ...
. The most widely used
Type 1 encryption card is the KOV-12 Fortezza card which is used extensively for the
Defense Message System
The Defense Message System or Defense Messaging System (DMS) is a deployment of secure electronic mail and directory services in the United States Department of Defense. DMS was intended to replace the Automatic Digital Network, AUTODIN network, a ...
(DMS). The KOV-12 is cleared up to TOP SECRET/SCI. A later version, called
KOV-14 or Fortezza Plus, uses a
Krypton microprocessor that implements stronger,
Type 1 encryption and may be used for information
classified up to TOP SECRET/SCI. It, in turn, is being replaced by the newer
KSV-21 PC card with more modern algorithms and additional capabilities.
The cards are interchangeable within the many types of equipment that support Fortezza and can be rekeyed and reprogrammed by the owners, making them easy to issue and reuse. This simplifies the process of rekeying equipment for crypto changes: instead of requiring an expensive
fill device, a technician is able to put a new Fortezza card in the device's PCMCIA slot.
The Fortezza Plus card and its successors are used with NSA's
Secure Terminal Equipment voice and data encryption systems that are replacing the
STU-III
STU-III (Secure Telephone Unit - third generation) is a family of secure telephones introduced in 1987 by the NSA for use by the United States government, its contractors, and its allies. STU-III desk units look much like typical office telephon ...
. It is manufactured by the
Mykotronx Corporation and by
Spyrus. Each card costs about $240 and they are commonly used with card readers sold by
Litronic Corporation.
The Fortezza card has been used in government, military, and banking applications to protect sensitive data.
References
*
*
*
*
*
*{{cite book, author=Peter Gutmann, title=Cryptographic security architecture: design and verification, chapter-url=https://books.google.com/books?id=MKcaOgrUYoMC&pg=PA236, accessdate=16 February 2012, year=2004, publisher=Springer, location=New York, isbn=978-0-387-95387-8, pages=236–237, chapter=The Capstone/Fortezza Generator
External links
SafeNet web site (Mykotronx is a division of SafeNet)Spyrus web siteLitronic web site
National Security Agency encryption devices