Cryptographic Service Provider

Cryptographic Service Provider (CSP ) are components ( Software-/Programmbibliotheken ) of the Windows operating systems from Microsoft. Each CSP implements functions of the Microsoft Cryptographic API ( MS CryptoAPI ). This API offers programs cryptographic functions to encrypt and decrypt ( encrypt and decrypt engl. ) of data and for strong authentication with digital certificates and secure generation of ( pseudo) random numbers to. Typical applications are the encryption and decryption of e- mails or to log on to systems with smart cards.

CSPs as a special variant of dynamic link libraries implemented. A CSP DLL requires a Microsoft digital signature. When charging, the validity of the signature is verified by the operating system ( validated).

In addition, the CSP is monitored continuously after loading into memory for changes by malware.

To apply for a signature, it is necessary, to make appropriate statements of compliance with various requirements, but a review of the source code by Microsoft does not take place.

The handling and issuing of the signature is done by Microsoft so far free of charge.

Because of government restrictions that apply in the U.S., all export versions ( for use outside the U.S.) on a 512- bit RSA public key and a limited 40 -bit symmetric encryption.

In addition to CSPs with basic cryptographic algorithms (eg, RSA), the cryptographic functions can extend to a chip card ( smart card).

A Smart Card constitutes the Microsoft CSP counterpart to the Public Key Cryptography Standard # 11, and allows the use as an intermediate application to the use of smart cards.

Smart Card CSP

A smart card CSP is adjusted to reflect specific smart card operating systems and brings to this file and security structures, the best according to PKCS # 15 on. Since PKCS # 11 is more powerful than the CSP interface, set many CSP on a PKCS # 11.

Windows identifies the CSP to use a smart card via the Answer to Reset the map, as it is entered into the registry.

Microsoft provides its own Base Smart Card CSP available, which represents this type basically a more specific interface since the fall of 2005.

In this Base Smart Card CSP interface information for some widely used smart cards are included. Some smart cards can therefore be used in the operating systems Windows NT, Windows 2000 and Windows XP without using an additional middleware. However, the Windows Vista operating system contains a different Base Smart Card CSP and therefore does not support the same smart card.