Fortezza is an
information security
Information security, sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management. It typically involves preventing or reducing the probability of unauthorize ...
system that uses the Fortezza Crypto Card, a
PC Card-based
security token
A security token is a peripheral device used to gain access to an electronically restricted resource. The token is used in addition to or in place of a password. It acts like an electronic key to access something. Examples of security tokens inc ...
. It was developed for the U.S. government's
Clipper chip
The Clipper chip was a chipset that was developed and promoted by the United States National Security Agency (NSA) as an encryption device that secured "voice and data messages" with a built-in backdoor that was intended to "allow Federal, State, ...
project and has been used by the U.S. Government in various applications.
Each individual who is authorized to see protected information is issued a ''Fortezza card'' that stores
private keys and other data needed to gain access. It contains an NSA approved security microprocessor called ''
Capstone'' (
MYK-80) that implements the
Skipjack encryption
In cryptography, encryption is the process of encoding information. This process converts the original representation of the information, known as plaintext, into an alternative form known as ciphertext. Ideally, only authorized parties can de ...
algorithm.
The original Fortezza card (KOV-8) is a
Type 2 product which means it cannot be used for
classified information
Classified information is material that a government body deems to be sensitive information that must be protected. Access is restricted by law or regulation to particular groups of people with the necessary security clearance and need to kn ...
. The most widely used
Type 1 encryption card is the KOV-12 Fortezza card which is used extensively for the
Defense Message System (DMS). The KOV-12 is cleared up to TOP SECRET/SCI. A later version, called
KOV-14 or Fortezza Plus, uses a
Krypton microprocessor that implements stronger,
Type 1 encryption and may be used for information
classified up to TOP SECRET/SCI. It, in turn, is being replaced by the newer
KSV-21 PC card with more modern algorithms and additional capabilities.
The cards are interchangeable within the many types of equipment that support Fortezza and can be rekeyed and reprogrammed by the owners, making them easy to issue and reuse. This simplifies the process of rekeying equipment for crypto changes: instead of requiring an expensive
fill device
A fill device or key loader is a module used to load cryptographic keys into electronic encryption machines. Fill devices are usually hand held and electronic ones are battery operated.
Older mechanical encryption systems, such as rotor mach ...
, a technician is able to put a new Fortezza card in the device's PCMCIA slot.
The Fortezza Plus card and its successors are used with NSA's
Secure Terminal Equipment
Secure Terminal Equipment (STE) is the U.S. government's current (), encrypted telephone communications system for wired or "landline" communications. STE is designed to use ISDN telephone lines which offer higher speeds of up to 128 kbit/s ...
voice and data encryption systems that are replacing the
STU-III
STU-III (Secure Telephone Unit - third generation) is a family of secure telephones introduced in 1987 by the NSA for use by the United States government, its contractors, and its allies. STU-III desk units look much like typical office telephone ...
. It is manufactured by the
Mykotronx Corporation and by
Spyrus. Each card costs about $240 and they are commonly used with card readers sold by
Litronic Corporation.
The Fortezza card has been used in government, military, and banking applications to protect sensitive data.
References
*
*
*
*
*
*{{cite book, author=Peter Gutmann, title=Cryptographic security architecture: design and verification, chapter-url=https://books.google.com/books?id=MKcaOgrUYoMC&pg=PA236, accessdate=16 February 2012, year=2004, publisher=Springer, location=New York, isbn=978-0-387-95387-8, pages=236–237, chapter=The Capstone/Fortezza Generator
External links
SafeNet web site (Mykotronx is a division of SafeNet)Spyrus web siteLitronic web site
National Security Agency encryption devices