Home page

Cryptography, data security and confidentiality of communication

is a set of instruments, tools and solutions delivering privacy and digital data integrity. Applied appropriately within our solutions, it ensures actual information confidentiality accessible only with strict access permissions.
Miniature norms

Operational compliance with cybersecurity norms

Engineering and development of solutions by default compliant with current cybersecurity norms
Compliance with Polish and European policy
  • The General Data Protection Regulation (GDPR), EU Regulation 2016/679
  • The Network Information and Security (NIS2), EU Directive 2022/2557, with the novelization of the Act on the National Cybersecurity System, a preview published on 23 april 2024, implementing NIS2 requirements
  • The Act on the National Cybersecurity System, published on 5 june 2018.
Compliance with the ISO international standards on cybersecurity and data privacy
  • Norm ISO/IEC 27001:2022 — an outline norm on Information Security Management Systems, with key extensions
    • Norm ISO/IEC 27002:2022 — Information security
    • Norm ISO/IEC 27701:2019 — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management
  • Norm ISO/IEC 27017:2015 — Information security for cloud services
  • Norm ISO/IEC 27018:2019 — Protection of personal data in public clouds
  • Norms ISO/IEC 27033-1|2|3|4|5|6|7 — Network security
  • Norms ISO/IEC 27034-1|2|3|5|5-1 — Application security
  • Norm ISO/IEC 27040:2024 — Storage security
  • Norm ISO/IEC 27100:2020 — Cybersecurity
Miniature advanced encryption

Advanced encryption

Advanced data encryption for server systems
Encryption systems for FreeBSD
  • Block device encryption
    • geli — an advanced encryption systems based on the GEOM and crypto frameworks, operating as a block storage hardware abstraction layer. Fully integrated with ZFS and Boot Environments enabled bootloaders, it offers full disk encryption for the most complex scenarios, usually operating as a device provider for UFS or ZFS filesystems. Possibly the most sophisticated encryption system currently available.
    • gdbe — an encryption system based on the GEOM and crypto frameworks operating as a block storage hardware abstraction layer, originally designed under a DARPA contract. Volumes encrypted with gdbe become distinguishable from volumes simply filled with random data, what qualities gdbe for very particular applications.
  • Native filesystem encryption
    • ZFS — encryption as a native ZFS filesystem feature compliant with the OpenZFS implementation, enabling on-the-fly encryption of ZFS datasets on physical and virtual volumes
Encryption systems for OpenBSD
  • Block device encryption
    • softraid (d:crypto) — an encryption system available as a softraid pseudodevice operating under CRYPTO dyscipline as a block device hardware abstraction layer. Integrated with the bootloader allows perfect full volume encryption, usually operating as a device provider for FFS.
Encryption systems for Ubuntu Server
  • Block device encryption
    • cryptsetup — an advanced encryption system based on the dm-crypt and LUKS frameworks, operating as a block device hardware abstraction layer. Advanced configurations offer full volume encryption supporting particular bootloaders. As a well developed and efficient encryption, it may be a device provider for OpenZFS or Btrfs.
  • Native filesystem encryption
    • ext4 — encryption as a native ext4 filesystem feature available for individual keyed file directories
    • ZFS — encryption as a native ZFS filesystem (OpenZFS implementation) feature, enabling on-the-fly encryption of ZFS datasets on physical and virtual volumes
Encryption systems for Oracle Solaris 11
  • Block device encryption
    • (Oracle) ZFS — encryption of original Oracle ZFS driven by the Solaris Cryptographic Framework cryptography provider. ZFS on Solaris remains a commercial product and its closed source code is not available for an independent review<
Hardware encryption
  • Hardware encryption scenarios involving self-encrypting drives, often operating as the base layer for more advanced configurations
    • Self-encrypting drives with individual security schemes
    • Self-encrypting drives implementing the TCG OPAL standard
Active protection and failsafe type schemes
  • One-time and temporary encryption and ciphers
  • Active software and hardware protections of encrypted systems and volumes against physical third-party interference and seizure
Advanced confidentiality and highly secure data exchange
Miniature confidentiality of communication

Confidentiality of communication

Information security and confidentiality of communication
Essential secure infrastructureEssential secure and authenticated communicationEssential secure Web resourcesEssential secure data sharing
Miniature Advanced confidentiality of communication

Advanced confidentiality of communication

Advanced confidentiality and closed-loop operations
Secure programming for confidentialityAdvanced encryptionContinuous closed-loop operationsClosed-loop communicationCommunication requiring traceless confidentialityConfidential special-purpose resources
Miniature Encryption and authentication

Encryption and authentication

Encryption and security of confidential and volatile digital data
Encryption and authentication of content, text and individual files
  • OpenPGP/GnuPG standard — a universal encryption and authentication system for content, text and individual files based on asymmetric cryptography, defined by the RFC 4480 and RFC 9580 standards and functioning as the de facto default system for software and code signing and encryption and authentication of electronic mail. In use for over 30 years, its security depends on the type of keys and algorithms chosen. The PGP standard encompasses direct exchange of public keys between communicating parties remaining independent on third-party trust services.
  • S/MIME standard — a universal encryption and authentication system for electronic mail based on asymmetric cryptography, defined by the RFC 8551 standard. The S/MIME depends on a trusted third-party confirming the validity of certificates in use.
  • Signify standard — a system of files and text authentication developed by the OpenBSD project based on asymmetric cryptography, intertwining ease of use with modern cryptography
Electronic signature and document authentication systemsBasic data encryption
  • Block device encryption
    • Encrypting filesystems — particular modern filesystems offer encryption capability, often operating as a transparent user independent layer.
      Example Apple APFS — a filesystem provided by recent versions of Apple MacOS on-tye-fly encrypting all data either as an automated Filevault component, or as a user configurable subsystem allowing more advanced configurations. Encryption capabilitys of both the Apple Silicon and the APFS filesystem may be an effective basis for a more complex data security scenario. APFS remains a closed-source commercial product.
    • Cryptographic containers and modular volume encryption — systems of simpler block encryption, effectively encrypting full volumes and maintaining virtualised cryptographic containers, usually open-source allowing independent security reviews.
      Example VeraCrypt — a modern fork of TrueCrypt
  • Encrypting stack filesystems — solutions for stack filesystems operation at the user level, most often used to securing particular pools of data
    Example eCrypFs for Linux or EncFS available on several platforms
  • Cloud-optimised data encryption — encryption systems by design optimised for deployments in third-party clouds and data exchange systems
    Example gocryptfs or cryfs available on several platforms
Confidentiality of communication and secure data exchange
Miniature VPN

Virtual Private Networks and secure data transport systems

Solutions ensuring secure communication between secure severs systems and networks
High performance secure IPSec linksWireguard protocol based virtual private networkSsh (OpenSSH) protocol based virtual private network
  • Virtualisation and ssh deployment as special purpose VPNs
  • Secure data transport for server systems and specialised networking hardware
  • Ssh as a secure authentication system for network resources
Secondary VPN solutions
  • OpenVPN based virtual private networks and links
  • Cisco AnyConnect based virtual private networks and links
Miniature Cloud

Private and public clouds and secure online data sharing

Engineering, deployment and management of private and public cloud services
Private cloudsPublic clouds
Miniature DeepWeb

Engineering of non-public and anonymous networks

Engineering, deployment, security and optimisation of services for the non-public Internet (deep web) and the hidden Internet (darkweb)
Deep web networksAnonymous networks
Miniature blockchain

Security and privacy of blockchain architectures

Solutions for blockchain architectures in programming and work environments
Blockchain architecture engineering basics
  • The blockchain concept as effective information storage
  • Dependency of the blockchain architecture on Internet and information exchange networks
  • Dependency of the blockchain architecture on processing power and hardware resources
Privacy of blockchain architectures
  • Blockchain architectures as concept of information certainty
  • Privacy of blockchain transactions
  • Applicability of public and transparent blockchains
  • Applicability of blockchains completely private
Cryptography and advanced security of blockchain architectures
  • Applied cryptography of existing blockchains
  • Blockchains as core architectures of cryptocurrency engineering
    • Cryptography of particular cryptocurrencies
    • Analysis of cryptocurrency transactions
Blockchain structures in public amd commercial applications
  • Blockchain architectures as distributed database
  • Blockchain architectures as distributed registry or event ledger
  • Engineering of systems based on blockchain architectures
Programming solutions for blockchain architectures