SPYRUS Announces CSP Products for Microsoft CryptoAPI; EES LYNKS Privacy Card and CSP Support Microsoft Authenticode Technology.

SAN FRANCISCO--(BUSINESS WIRE)--Jan. 27, 1997--SPYRUS(R) today announced availability of a Cryptographic Service Provider (CSP) for Microsoft(R) CryptoAPI, based on the SPYRUS tamper-resistant EES LYNKS Privacy Card.

The CSP has been developed and tested for use with Microsoft Authenticode technology, enabling software developers to digitally sign their code using a high-assurance PC card hardware token. This CSP is the first hardware-based CSP released for use with Microsoft CryptoAPI. The EES LYNKS Privacy Card implements the industry standard RSA algorithm to perform the public key cryptography used with Microsoft Authenticode technology, which verifies the integrity and authenticity of software components distributed over the Internet.

The SPYRUS Security-In-A-Box(TM) for Microsoft Authenticode technology is available for users who want a plug-and-play solution to sign their code. This product includes an EES LYNKS Privacy Card, CSP and SPEX/(TM) software libraries, device drivers, an installation utility, and a card initialization utility. The CSP is supported on Microsoft Windows 95 and NT platforms and is built on top of the SPYRUS Algorithm Agile(TM) SPEX/cryptographic library. SPEX/ provides a common set of functions to interface to SPYRUS PC card products.

For developers building applications to the Microsoft CryptoAPI, the SPYRUS CSP Application Developer's Kit product provides the necessary components for developing CryptoAPI-compliant applications using the EES LYNKS Privacy Card and CSP. The kit includes an EES LYNKS Privacy Card, PCMCIA reader, CSP and SPEX/software libraries, device drivers, installation utility, card initialization utility, programmer's guide, technical support, and test tools. Pricing for these CSP-based products is available at the SPYRUS web site or can be provided upon request.

"The SPYRUS EES LYNKS Privacy Card and CSP offer an additional level of hardware-based security for Authenticode technology by providing software publishers stronger protection for their code signing keys," said Pradyumna Misra, security product unit manager at Microsoft Corporation. "The SPYRUS card and CSP lets developers easily take advantage of highly secure, portable crypto processing power and key protection through Microsoft CryptoAPI."

"The Security-In-A-Box for Microsoft Authenticode technology from SPYRUS provides a high-assurance solution for commercial developers using Authenticode technology," said Gina Jorasch, director of product marketing at VeriSign. "Hardware token technology for the user community complements VeriSign's online Digital ID Center services by providing end user security and portability not found in software-based cryptography."

The SPYRUS EES LYNKS Privacy Card and CSP together provide a powerful cryptographic platform intended to support a wide range of security-critical applications such as SET payments, S/MIME messaging, SSL transport layer security, file encryption, Certificate Authority implementations, EDI/workflow, and remote access authentication. The CSP supports standard RSA key exchange, RSA signature, SHA-1, MD5 and DES algorithms.

"The use of hardware-based cryptography provides the required level of key protection for applications such as distributing commercial software over the Internet," said Russ Housley, chief scientist at SPYRUS. "The EES LYNKS Privacy Card provides tamper-evident protection of the RSA private keys, which is especially important when commercial software developers are using these keys to authenticate their code prior to distribution."

The EES LYNKS Privacy Card is a multifunction, high-assurance, high-capacity processing and storage platform for desktop and server security-critical applications. In addition to its cryptographic and key management functionality, the card can store up to 50 X.509 public key certificates. The PC card form factor provides a low-cost hardware crypto solution that offers both security and mobility for the user, which is especially important for today's traveling user.

About SPYRUS

SPYRUS is a leading provider of high-assurance hardware cryptographic products that are Algorithm Agile(TM) and form factor independent. SPYRUS' products provide encryption, digital signature, access control, and metering solutions for Corporate IS, WWW/Internet and Intranet Applications, Electronic Commerce, and Government applications. The Company's core products are built around its SPEX/(TM) library, a host-based API that supports application integration with a suite of hardware cryptographic products.

SPYRUS cryptographic products are intended for use with security- sensitive applications; protocols such as SET, SSL, and S/MIME; and Microsoft(R) Authenticode(TM) technology. The Company's products are used with a variety of certificate authority products to provide critical infrastructure support for issuance and management of a deployed hardware token community.

Founded in 1992, SPYRUS is headquartered in San Jose, Calif. and has branch offices in Columbia, Md., and Waltham, Mass. -0-

Note To Editors: SPYRUS(R) is a registered trademark of SPYRUS. SPEX/(TM), Algorithm Agile(TM), LYNKS Privacy Card(TM), and Security-In-A-Box(TM) are trademarks of SPYRUS. All other trademarks are the property of their respective owners.

CONTACT: SPYRUS

Stu Vaeth, 617/647-7676

Email: [e-mail]

WWW: http://www.spyrus.com