cryptsoft.com.au

What It Is

Cryptsoft is an SDK vendor focused on enterprise-grade key management. Its core products are client and server SDKs based on the OASIS KMIP standard. It is not an out-of-the-box KMS SaaS product for end-user enterprises; instead, it helps vendors in storage, cloud, security, backup, embedded systems, and government-grade platforms quickly embed standardized key management capabilities into their own products.

Core Capabilities

In terms of protection scope, Cryptsoft focuses on encryption key lifecycle management and KMIP interoperability, covering a wide range of KMIP operations such as Create, Register, Destroy, Re-Key, Archive, Recover, Encrypt, Decrypt, Sign, MAC, and RNG. Deployment is primarily SDK-based, with support for C, C++, C#, Java, and Python. It provides client SDKs, C/Java server SDKs, and KMIP Tiny. Its strength lies in broad language and platform coverage; the main text mentions support for 100+ platform combinations, including Linux, Windows, legacy systems, and embedded environments.

Compliance and standards support are its main selling points. The products claim Full OASIS KMIP compliance, covering KMIP 1.0 through 2.1, while some C/C++/Java products support capabilities from the KMIP 3.0 working draft. On the post-quantum side, it supports TLS 1.3 PQC Hybrid Key Agreement, as well as NIST algorithms such as ML-KEM, ML-DSA, and SLH-DSA, aimed at addressing “Harvest Now, Decrypt Later” risks.

Pricing and Integration

Pricing is not publicly listed. The site only prompts users to contact sales, request an evaluation, and discuss licensing options, suggesting a stronger focus on customized enterprise licensing. Integration capabilities are strong, with support for TTLV, JSON, XML, and HTTPS. It is compatible with cryptographic components such as OpenSSL, wolfSSL, Bouncy Castle, and RSA BSAFE, and lists interoperable ecosystem vendors including DellEMC, IBM, Oracle, SafeNet, Thales, Utimaco, and Vormetric.

Pros, Cons, and Who It’s For

Its advantages are a strong focus on its niche, deep experience with the KMIP standard, robust cross-language and cross-platform capabilities, and endorsement by many enterprise customers. The downside is that it is difficult for ordinary enterprises to use directly, as it requires cryptographic engineering and protocol integration expertise. Information on a management console, alerting, audit reports, payment methods, and similar operational features is limited in the source text.

Access from China and Alternatives

Access from China cannot be determined from the source text. If procurement is affected by cross-border connectivity, contract, payment, or compliance constraints, buyers may also evaluate international KMS/HSM vendors such as Thales, Utimaco, IBM, and Oracle, or consider domestic cloud-provider KMS products, Chinese HSMs, and key management systems as alternatives.