Devon Software Chooses RSA Technology for Authentication Server; Company Incorporates RSA Encryption and Digital Signature Technology in KyberPASS.

REDWOOD CITY, Calif.--(BUSINESS WIRE)--Oct. 7, 1996--RSA Data Security, Inc., a wholly owned subsidiary of Security Dynamics Technology, Inc. (NASDAQ: SDTI), today announced that Devon Software Corp., of Ottawa, Ontario, has incorporated the functionality of RSA's encryption and digital signature technology into its KyberPASS Authentication Server, a public key-based authenticating firewall designed to provide a non-intrusive security solution transparent to client and server systems.

Using RSA's encryption technology, KyberPASS protects enterprise resources by client authentication using solid public/private key techniques. Privacy is provided through dynamic encryption techniques.

"The Internet is growing so fast, and the threats to private networks are increasing so rapidly, that next-generation firewall technology requires the integration of advanced encryption and authentication technologies," said Jim Bidzos, president of RSA. "Devon, with KyberPASS, is making it easy for enterprises to do business securely with internal or external customers. RSA is glad to be a part of this important technology."

KyberPASS provides a simple but effective approach to enabling security and privacy on public and private networks. Enterprise resources are protected by client authentication using digital signature (public/private key) technology. Privacy is ensured with strong encryption technology. Private keys are held by users on smart cards, diskettes or hard drives, according to the security requirements of the application. Public keys are registered in public key repositories, also known as certificate authorities (CAs). KyberPASS uses online, real-time access to local and remote CAs.

KyberPASS uses digital signatures to authenticate users at the start of a session and to re-authenticate each data packet sent during a session. This technology uses the same digital signature authentication techniques used by the banking industry and the government to securely transfer funds. With digital signature technology, a company can be confident that users are who they claim to be.

KyberPASS thus creates a secure tunnel between end users and enterprise servers across TCP/IP networks. This allows enterprises to operate a virtual private network between the client workstation and a server, across public and private networks, including the Internet.

KyberPASS also protects enterprise servers from unauthorized access. The outside world sees only KyberPASS' network address. Only authenticated traffic gets through. Locking each data packet stops unauthorized users from seeing user IDs and passwords, and from copying, modifying and resending authorized packets. Detailed audit logs warn of unauthorized attempts and can help identify where the attack is coming from.

KyberPASS complies with open security standards including IPv6 security recommendations. Secure tunneling is achieved using Privacy Enhanced Mail (PEM) public/private key techniques and RSA BSAFE encryption. Public key repositories adhere to the X/509 standard and links to remote X.500/X.509 directories are also supported.

"KyberPASS is the only authenticating firewall using the X.509 certificate standard today," said Rand Haverty, vice president of research and development for Devon. "Thanks to RSA and BSAFE, Devon can provide solutions that enable security and privacy on public and private networks."

Developers at Devon used RSA's BSAFE software developer's toolkit to build security into the company's KyberPASS Authentication Server. BSAFE is a leading cryptography engine that provides software developers with multiple algorithms and modules for adding encryption and authentication features to applications. BSAFE includes modules for popular encryption techniques such as RSA, Triple DES, RC4 and RC5, and also supports digital signatures and X.509 certificates.

Devon is a participant in the industry's Secure Wide-Area Network (S/WAN) initiative whose goal is to develop specifications that allow companies to mix-and-match firewall and TCP/IP stack products to build Internet-based Virtual Private Networks (VPNs).

Devon Software Corp.

Devon Software Corp. is a subsidiary of The Devon Group Ltd. Established in the late 1980s, Devon consists of more than 40 professionals experienced in all areas of information systems technology consulting and implementation. For more information about Devon, call 613/567-2281 or see the company's World Wide Web site at http://www.devon.com.

RSA Data Security, Inc.

RSA Data Security, Inc., a wholly owned subsidiary of Security Dynamics Technologies, Inc., is the world's brand name for cryptography, with more than 75 million copies of RSA encryption and authentication technologies installed and in use worldwide. RSA technologies are part of existing and proposed standards for the Internet and World Wide Web, IT4, ISO, ANSI, IEEE, and business, financial and electronic commerce networks around the globe. The company develops and markets platform-independent developer's kits and end-user products, and provides comprehensive cryptographic consulting services.

For more information on any of RSA's encryption technologies, please call RSA directly at 415/595-8782 or send electronic mail to [e-mail]. RSA also provides information on its Web site at http://www.rsa.com. -0-

Note to Editors: BSAFE and TIPEM are trademarks of RSA Data Security, Inc. All other product and brand names are trademarks or registered trademarks of their respective companies.

CONTACT: For RSA Data Security

Patrick Corman, 415/326-9648

[e-mail]

or

Devon Software Corp.

Ron Walker, 613/567-2281

[e-mail]