Overview

Software-Defined Key Protection & Key Management

Unbound has decoupled trust from infrastructure. Based on cryptographic breakthroughs that draw strength from math (not matter), Unbound Key Control (UKC) is the first solution to offer a truly abstracted key management that meets the high levels of security once only attainable through hardware-based perimeter-centric models.

Built upon Unbound’s platform-agnostic vHSM technology, UKC can be deployed across your entire decentralized hybrid cloud and geo-distributed environments without disrupting existing application workflows. All key management and user management operations are fully automated using a REST API, giving you the ability to scale up or down, create partitions and users, register clients and revoke keys immediately across your entire global infrastructure.

Stretch the boundaries of your security infrastructure to centrally manage all crypto keys, secrets and certificates across your network (including BYOD, public cloud and virtual machines) from a single pane of glass.

Locking keys within physical boundaries was generally accepted as the safest method of key protection. It protects against the single point of failure created by traditional key-management methodologies, where keys often appeared in the clear during their lifecycle – while being generated, in use, or at rest. Therefore, the best way to protect keys from being compromised was to lock them within dedicated hardware.

Mathematically Proven Guarantees of Security

Unbound Key Control safeguards key material with mathematically proven security guarantees: Each private key is stored in two separate random shares. These shares are never combined at any point in time. The key material never exists in the clear either in memory, disk or over the network at any point throughout the key lifecycle, including key creation, in-use (e.g. for signing, decryption) and at-rest. Obtaining key material requires compromise of both pair nodes simultaneously.