ICMC20, a brief summary of an unusual edition

Blog

28
- Sept
2020
Posted by: José Ruiz
ICMC20, a brief summary of an unusual edition

Last week held the ICMC20, the International Congress on Cryptographic Modules, an edition that for us has been very special, since our CTO, José Ruiz has been the Program Director and, in addition, we were able to present a success story with one of our most appreciated clients.

Although it is true that this edition began with some problems, since, at first, the idea was to make it in May, as in previous editions. However, for reasons of safety and public health due to COVID19, had to be delayed until September and held completely virtually, a change that was well received by both attendees and speakers and that, thanks to the technical team, went perfectly.

ICMC20 brought together more than 400 industry leaders from 27 countries to address the unique challenges faced by those who develop, produce, test, specify and use cryptographic modules, with a strong focus on standards such as FIPS 140-3, ISO/IEC 19790, eEIDAS and Common Criteria.

Conferences and topics discussed at ICMC20

The event was full of very interesting topics and current issues in the field of cybersecurity, all of them had top level experts in their respective fields. Experts from the leading companies and organizations in the sector offered their knowledge in various conferences.

Among all of them, the sessions about Random Bit Generators and those referring to FIPS 140-3, the new cybersecurity standard for cryptographic certification, with experts from NIST, stood out. Here you can find all the talks that were offered during the 4 days that the ICMC20 took place.

Anqlave and jtsec offered a talk together.

Juan Martínez performed a talk together with Assaf Cohen, CEO at Anqlave, about the sucess case Anqlave Data Vault and how it achieved FIPS 140-2 certification , thanks, in part, to our consultancy service. The conference was about how to integrate the open source Crypto in the new generation Intel technology.

The presentation described how we have carried out the smart integration of Intel SGX technology into the OpenSSL source code specifying, on the one hand, what problems were found during the integration process and how they were solved and, on the other hand, how this was indicated in the FIPS 140-2 documentation in order to face the evaluation successfully. The talk covered the following sections:

  • A brief introduction to Intel SGX and Open SSL.

  • A definition of the problems encountered during the integration of OpenSSL to Intel SGX and how they were solved.

  • A definition of what problems were encountered during the FIPS 140-2 certification process and how they were resolved.

    Acknowledgements and looking for the next edition.

    From jtsec, we want to thank all the participants, both attendees and speakers, as well as the technical team, for having been able to carry out this edition, taking into account all the inconveniences we had to overcome. Thank you for your understanding, flexibility and effort.

    We hope that the next edition can be held on-site, because that will mean that we are back to normal and that we will have overcome the pandemic. ¡See you at ICMC21!

  • José Ruiz/CTO

    Jose is an expert consultant on the Common Criteria standard with more than 10 years of experience. Jose has a wide background in other security assurance standards in the field of the information technology as Common Criteria, FIPS 140-2, FIPS 140-3, GP TEE, PCI-PTS, LINCE. Jose has served as an evaluator, Technical Leader and CC Consultant for Epoche&Espri and as CC lab manager and Cyber Security Service Manager for Applus+. His experience has led him to participate as a speaker in various editions of the ICCC (International Common Criteria Conference) and ICMC (International Cryptographic Module Conference). He has been the “Chairman” of a subgroup within the ISCI WG1 Eurosmart Initiative to develop the CC Methodology. He is also member of different working groups as ISO SC27 or Global Platform TEE and an active member of the group ERNCIP “IACS Cybersecurity certification“.

    In 2017 he founded with Javier what is now known as jtsec. He is currently in charge of promoting the commercial expansion of the company from its headquarters in Madrid as CTO. In addition, he represents jtsec in various national and international forums and is responsible for quality.


    Contact

    Send us your questions or suggestions!

    By sending your data you allow us to use it to resolve your doubts by sending you commercial information of interest. We will delete it when they are no longer necessary for this matter. Know your rights in our Privacy Policy.