The SafeLogic Blog

In 1942, Admiral Chester Nimitz led the US Navy to a crucial victory over the Japanese Navy in the battle of Midway, changing the course of World War II in the Pacific.  A crucial factor for this victory was the work of US codebreakers, led by Commander Joseph Rochefort, which provided Admiral Nimitz with both the exact location and timing of the Japanese Navy’s attack.  This is only one of many examples in history where cryptography and cryptanalysis changed the course of history.  The race between the code makers and codebreakers is ongoing, and here at SafeLogic, we never forget what is at stake when it comes to getting cryptography right.

This past year, the world of cryptography made history. It was my honor and privilege to attend an August 13^th meeting at the White House on the day the National Institute of Standards (NIST) introduced three new quantum-resistant cryptographic algorithm standards. Ever since that day, we have seen a significant uptick in interest in migrating to post-quantum cryptography (PQC), making quantum resilience an idea whose time has come.

Our job at SafeLogic is to stay ahead of cryptography developments by being proactive and bringing validated, holistic, interoperable, and crypto-agile cryptographic solutions to our customers. These solutions enable enduring privacy and trust in the ever-changing digital world. We have been on this mission for over twelve years, and with all the historic developments in 2024, we have been busy!

We have previously written about three tsunamis of change happening simultaneously in the world of cryptography:  the transition from FIPS 140-2 to FIPS 140-3, more stringent requirements for entropy generation, and of course, migration to PQC.  In 2024, SafeLogic made significant strides in each one of these areas.

To streamline our customers’ transition to FIPS 140-3, SafeLogic secured multiple FIPS 140-3 validations, with SafeLogic’s CryptoComply v3 software securing FIPS 140-3 validation on the most extensive set of Operating Environments (OEs).  This is a significant achievement that enables SafeLogic to assist its customers in adopting FIPS 140-3 validated cryptography on a wide variety of OEs from mobile, to server, to cloud, to embedded, to mainframes, and everything in between.

SafeLogic had also been preparing to meet NIST’s new requirements for strong, FIPS validated sources of entropy.  In that respect, SafeLogic has been working hard on a new product that we plan to release sometime in Q1 of FY25.  That product has gone through extensive lab testing and is now undergoing validation by NIST.  With this new product, SafeLogic customers will be able to claim the use of a strong, FIPS validated, software-based source of entropy on the same extensive set of OEs as supported by our FIPS 140-3 validated CryptoComply software.

Finally, in the realm of PQC, SafeLogic has been running an early access program for its upcoming PQC module since announcing it at the RSA conference.  Most recently, SafeLogic announced an early access program for its new product called CryptoComply PQ TLS, which adds quantum resistance to quantum-vulnerable TLS connections.  SafeLogic has also been collaborating with NIST’s  National Cybersecurity Center of Excellence (NCCoE) in 2024 as lead for the PQC Risk Management and Migration Prioritization workstream.

In addition to our work in FIPS 140-3, entropy, and PQC, SafeLogic continued to innovate in areas such as policy-driven crypto-agility and cryptographic use discovery – both crucial in the context of PQC migration and also ongoing cryptographic management.  We have also introduced our new CryptoComply for Go module and released the first third-party OpenSSL 3.x compatible module for iOS (available as both FIPS 140-2 and FIPS 140-3).  Additionally, to make it easier for US Government agencies to purchase SafeLogic software directly, we announced our partnership with Carahsoft in September.

2024 was another year of strong double-digit growth for SafeLogic as our business continues to grow in leaps and bounds.  None of this success would be possible without our amazing customers, partners, Board, shareholders, and, of course, our employees!  Thank you for all your support and help in 2024. We are looking forward to what is ahead of us in 2025.  Let us continue to work together to ensure a continued secure cryptographic future!