Cryptographic operations for ensuring confidentiality, integrity and authenticity of data or systems represent a small target of high value. Vulnerabilities that can be devastating are usually unclear and poorly understood. Systems may appear to function correctly, but there is a risk of malfunction that can manifest at the worst time and in the worst possible way.

Cryptographic operations are not just about mathematics in algorithms used in cryptographic hardware and software solutions, but it is also important how these solutions are designed, developed, implemented and verified. CREAPLUS offers various cryptography services that can help organizations develop new solutions or verify and confirm the correct operation of existing ones. CREAPLUS services can serve to increase the capacity of an organization’s own team or as independent consulting and guidance in developing cryptographic solutions.

At CREAPLUS we design cryptographic solutions based on customer needs. We help customers navigate among numerous available cryptographic techniques – from AES, RSA and elliptic curves to less widely used algorithms and custom algorithms. We can take on a project from initial design to secure algorithm development and executable code delivery. Specialized review ensures that solutions are properly designed and implemented and that they also function correctly.

Examples of past work:

• Implementation of traditional cryptographic algorithms such as ARIA, SEED, Keccak, and implementation of custom cryptographic schemes, such as key derivation schemes and similar.
• Implementation of the Boneh–Lynn–Shacham (BLS) signature algorithm. We identified required curves, suitable bilinear pairings, outlined the implementation path and supported new arithmetic needed for mathematical operations over extensions of non-binary finite fields.
• Implementation of the KCDSA signature algorithm, the Korean variant of DSA. Public key derivation from private proceeds in a non-standard way. The new derivation had to be studied, understood and translated into a specific HW environment.
• Definition of technical requirements and data flow for implementing the Schnorr signature algorithm using the Pallas curve and Poseidon hash function. Verification of whether or in which parts such a Schnorr signature variant differs from the traditional definition, verification of whether the required firmware supports Pallas and Vesta curves, and verification of whether the Poseidon hash contains any peculiarities that would complicate implementation.

Cryptography consultants at CREAPLUS are involved in the most demanding projects that include cryptographic protocols, designs, implementations, systems and applications. Team members with years of experience in security with a passion for cryptography provide top-quality services. We have rich experience in designing, developing, fixing and developing cryptographic solutions that our clients use for their core business, compliance, data protection and other security needs.