Genoa, Italy - PRIMEUR is pleased to announce General Availability of SPAZIO Data Secure Toolkit 3.0 (DSTK). This has been truly a major effort and a key milestone in DSTK development, probably the major release ever since DSTK has initially been released.

We have a number of innovative ideas about pricing and packaging also.

DSTK puts the DS line in the new millennium. Apart from specific enhancements the key architectural news are:

• Java version. DSTK now provides a Java toolkit fully JCA / JCE compliant
• Remotization is now possible through a server using HTTP(S) protocol. A high performance dedicated HTTP Server supports the crypto services provided by DSTK using a REST style application protocol. fashion. This is clearly the direction the market is going to as several large enterprises are actually starting implementing remote crypto services.

From the packaging / pricing stand point we have made a major effort to provide a highly flexible packaging / pricing scheme. There is an entry level version, FREE OF CHARGE, freely downloadable from our web site. That version will have limitations, as you will see below, that would not make it suitable for use in an Enterprise scenario. Still it will allow users to test the power of DSTK as a possible first step into the higher, more powerful versions.

Here are the specific versions.

This ideally would be the equivalent, although providing advanced functionality to what the previous DSTK version used to be.

SPAZIO DSTK SE 3.0 brings the following new functionalities:

• A Native Java version, internally named DSTK4J
• DSTK SE is delivered with for the 2 development languages, C and Java
• DSTK SE will be initially released for the the distributed platforms only, Win and 4 major Unix brands (AIX, Solaris, HP_UX, Linux) both in 32 and 64 bits versions.
• Besides PKCS#7 format we now also support SSL/TLS, GNU_PGP, S/MIME and CMS
• Provides a basic Command Line interface
• Provides Buffer Chaining (C) and I/O Streaming (Java) capabilities.

This is a free, powerful and only partially limited toolkit. It can be downloaded here. The purpose is not to allow Enterprise class applications, but rather to allow free testing of the solution and deployment of limited scale, somewhat limited functionally but nevertheless perfectly working applications.

SPAZIO DSTK CE is the same as DSTK SE less:

• Only runs on "Non Enterprise only" platforms. That actually means Windows and Linux.
• No support for latest strength algorithms: no AES, RSA keys limited to 1024, no Sha 2.
  Still you can build a T/DES + 1024 RSA + SHA-1 application that today is pretty much run of the mill. Not if you are thinking the next 2 + years, which is exactly the point
• No Buffer Chaining or I/O streaming capabilities
• This version is NOT supported. We will not support users of the CE. Users willing to be supported will rather upgrade to the SE or EE editions. Users using the CE and later upgrading to SE will have the right to have the CE supported (and the applications written with it) on a 1 to 1 basis (one CE supported for one SE acquired).

SPAZIO DSTK CE is named by CNIPA (Italian Civil Service National Information Center) as Software product able to perform digital signatures according to the CNIPA standards.

This is the Enterprise class solution, for large deployments in a large environment.

SPAZIO DSTK EE is the same as SE but adds:

• Automatic LDAP interface and CRL management is now provided
• OCSP client support
• TSA / TSP support to provide Time Stamping capabilities
• PDF signature and verification capability
• DSTK HTTP Rest style Server to provide remote services; provided both as a dedicated server and as a J2EE compliant server (container)
  This is the crucial component of the EE. It will provide the Remotization services through a very high performance, highly scalable HTTP server. You will have the ability of receiving requests form a multitude of crypto clients and forward them to the DSTK server, either on the same machine or on another machine. This capability is crucial in large distributed environments, where signature services will be provided by a single machine, well equipped with HSM, serving a plethora of applications and different instances of the same application. The first scenario that comes to the mind is that of Interbanking Corporate Banking
• The current DSTK customer base will be offered a migration path and an upgrade policy to the EE. Current paying customers will be given the SE not including DSTK4J.

Primeur is also committed to fully interfacing its products with the SOA and Tivoli frameworks, since we are aware that the deployment, administration and management of EAI infrastructure must be a primary goal of today's I.T. organizations.