Bloombase KeyCastle vs QuintessenceLabs Trusted Security Foundation

Bloombase KeyCastle manages cryptographic keys and certificate authority certificates, including private signing keys, public verification keys, authentication keys, and data encryption keys. It supports key creation, import, protected storage, verification, validation, inquiry, and deletion. Bloombase says keys stored in KeyCastle cannot technically be retrieved in plain form; its specifications say capacity is limited by available system storage, not a preset key count. Listed algorithms include AES, RSA, SHA hashes, Camellia, SEED, ARIA, and post-quantum options such as CRYSTALS-Kyber and CRYSTALS-Dilithium. KeyCastle supports PKCS#11 hardware security modules, OASIS KMIP, and a listed FIPS 140-2 compliant Bloombase Cryptographic Module. It connects with key services from AWS, Google, IBM, Microsoft Azure, and Oracle. Certificate functions include X.509 and PKCS#12 import and export, validity checks, retrieval, and revocation checks. Administration includes web and command-line consoles, central configuration, SNMP, and syslog. Optional high availability supports active-active or active-standby operation; recovery options include configuration backup and restore and recovery quorums. Pricing is on request, and Bloombase says customers may request a 30-day evaluation kit.

QuintessenceLabs Trusted Security Foundation (TSF) is a centralized manager for cryptographic keys and policies across the key lifecycle. It is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP. Product materials describe policies for objects and users, plus replication across up to 16 nodes. The TSF range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp. Listed capabilities cover one-time pad, symmetric and asymmetric ciphers, key derivation, random objects, certificates, and selected cryptographic operations. Administrators can use web HTTPS or command-line SSH interfaces. The product sheet states support for thousands of end-client systems, tens of millions of keys, and 8,000 key requests per minute per node. The maker says TSF 400 contains an Entrust nShield XC FIPS 140-3 Level 3 validated HSM as a root of trust. TSF is under evaluation for Common Criteria NDcPP compliance. The maker also states that its key management application is compliant with NIST SP 800-57 where applicable. Pricing is available on request, with configurations tailored to different needs.