Cryptography Research Announces Thales CEACI as an Accredited Evaluation Lab for DPA Testing Program

SAN FRANCISCO, Dec 09, 2010 — Cryptography Research, Inc. (CRI) today announced the accreditation of Thales CEACI as an independent testing lab to conduct evaluations for the Differential Power Analysis (DPA) Countermeasure Validation Program. The program, designed to help chip purchasers and downstream customers identify devices with effective security, involves rigorous independent testing of products to evaluate their resistance to DPA attacks.

“We are very pleased to join as an accredited laboratory under the DPA Countermeasure Validation Program,” said Nathalie Fyet, manager of Thales CEACI ITSEF. “We look forward to helping our customers meet their product evaluation and certification needs.”

Thales CEACI joins Brightsight BV in the Netherlands and T-Systems in Germany, to become the third leading security evaluation facility to be accredited by CRI to conduct testing under its DPA Countermeasure Validation Program. Through this program, licensed users of CRI's DPA countermeasure technology have the right to display the DPA Lock certification symbol in connection with products that qualify under the tests conducted by accredited labs. Products displaying the DPA Lock give customers assurance that the chip or product is licensed and contains tested countermeasures.

“CRI is excited to announce Thales CEACI as an accredited laboratory under the DPA Countermeasure Validation Program,” said Ken Warren, smart card business manager of CRI. “Our rigorous diligence process has confirmed that Thales CEACI possesses the skills, tools and personnel to perform high-quality side-channel analysis.”

Security chips and other cryptographic devices can be vulnerable to DPA attacks, which can reveal secret keys. Effective countermeasures are required to protect devices from attack. The DPA Countermeasure Validation Program includes a suite of tests specifically designed to analyze the effectiveness of a device's countermeasures against power analysis attacks. CRI plans to approve only a select number of the world's most capable testing labs to participate in the program.