Eviden KMS vs QuintessenceLabs Trusted Security Foundation

Eviden KMS centralizes encryption and decryption, key management, and certificate management. Its architecture combines key lifecycle management, an encryption oracle, and public key infrastructure. Administrators can generate, store, rotate, distribute, and revoke keys, and set access policies. The product supports FIPS 140-3 mode and KMIP versions 1.0–1.4 and 2.0–2.1 in binary and JSON formats, but implements a targeted subset rather than the entire KMIP standard. Listed integrations include Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and SmartCard HSMs; cloud options include Azure BYOK, GCP CSEK and CMEK, AWS BYOK, and AWS Fargate. It also integrates with Google Workspace Client-Side Encryption, Microsoft 365 Double Key Encryption, and several databases. Deployment options include Debian and RPM packages, Windows and macOS installers, and standard or FIPS Docker images. Its web GUI supports client certificates and OIDC token authentication. Pricing is on request, with per-CPU pricing, connectors included, and any number of servers.

QuintessenceLabs Trusted Security Foundation (TSF) is a centralized manager for cryptographic keys and policies across the key lifecycle. It is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP. Product materials describe policies for objects and users, plus replication across up to 16 nodes. The TSF range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp. Listed capabilities cover one-time pad, symmetric and asymmetric ciphers, key derivation, random objects, certificates, and selected cryptographic operations. Administrators can use web HTTPS or command-line SSH interfaces. The product sheet states support for thousands of end-client systems, tens of millions of keys, and 8,000 key requests per minute per node. The maker says TSF 400 contains an Entrust nShield XC FIPS 140-3 Level 3 validated HSM as a root of trust. TSF is under evaluation for Common Criteria NDcPP compliance. The maker also states that its key management application is compliant with NIST SP 800-57 where applicable. Pricing is available on request, with configurations tailored to different needs.