atsec tests Time Antaeus E-montage 2k cryptographic algorithms

Beijing China – Recently, the Approved cryptographic algorithms implemented in Beijing Time Antaeus Media Tech. Co., Ltd’s E-montage CDCS 2k product were tested by atsec information security, and validated under the CAVP (Cryptographic Algorithm Validation Program) by NIST (National Institute of Standards and Technology). E-montage CDCS 2k is the first digital cinema server product developed in P.R. China to certify implementation of its approved security functions.

Beijing Time Antaeus Media Tech. Co., Ltd is focusing on the independent research and development of the digital cinema plan server E-montage CDCS 2k, which is aiming for compliance with the DCI (Digital Cinema Initiatives) specification and FIPS 140-2. The NIST certification validates that the algorithms in the product have been implemented correctly, and shows that the fundamental technologies of protecting intellectual property required by the standards can be implemented independently in P.R. China. Gang Qing, CTO of Time Antaeus, notes: “Only a few vendors in the world are developing digital cinema products based on the DCI standard, and Time Antaeus is one of them. By achieving the certifications, our clients will benefit from the expertise and preciseness the information security experts have provided. We hope that we can achieve further success by also earning FIPS 140-2 cryptographic module validation for our product.�

Cryptographic algorithm validation is a prerequisite for testing a cryptographic module’s conformance to the FIPS 140-2 standard. All of the tests must be conducted by third-party laboratories that are accredited as Cryptographic Module Testing (CMT) laboratories. atsec information security, an accredited CMT laboratory, was a natural choice for Beijing Time Antaeus Media Tech. Co., Ltd, as atsec has a great deal of global experience in information security evaluation and testing of IT products.

The certificate numbers, product information and vendor information can be found on the validation list of the CAVP’s official website at http://csrc.nist.gov/cryptval/. Yan Liu, atsec China consultant, notes: “I am glad that the first product from the mainland of P.R. China has successfully finished cryptographic algorithm validation. According to NIST, many products implement approved cryptographic algorithms, but testing shows that almost 25% of implementations are incorrect in some way, and about half of all products containing cryptographic modules include vulnerabilities. Evaluation and validation can offer real improvements in the assurance afforded to product users.�

About atsec information security
atsec information security is an independent, standards-based IT (information technology) security consulting and evaluation services company that combines a business-oriented approach to information security with in-depth technical knowledge and global experience. atsec was founded in Munich (Germany) in January 2000 and has extensive international operations with offices in Germany, the U.S., Sweden, the U.K., and China. atsec leverages its deep security, process, and standards expertise to consult on a wide range of IT security needs, enabling clients to establish integrated security management procedures in order to manage security risk and improve data, product, and business process reliability. atsec works with leading global companies such as IBM, HP, Oracle, Cray, BMW, SGI, Vodafone, Swisscom, RWE, and Wincor-Nixdorf.

About Time Antaeus
Beijing Time Antaeus Media Tech. Co., Ltd belongs to the Beijing Time Antaeus group. The company is focusing on research and development of top-level digital issuance and display solutions. Time Antaeus has an excellent R&D team who can provide technical solutions on post-producing, issuing and playing digital movies, advertisement on screen, and other digital content. It is the first company in the world which can provide digital cinema solutions based on both chip and non-chip software systems.