SSLBlackbox .NET Client-Server - In-house

SSLBlackbox package of SecureBlackbox
SSL protocol was originally introduced by Netscape to secure access to Internet sites. Since then, SSL was adopted by Internet community for securing network communications in Internet and Intranet networks as TLS (Transport Layer Security) protocol.

With SSLBlackbox you can connect to remote servers or build your own secure servers.

SSL/TLS is often used to secure application-level protocols, such as HTTP, FTP and SMTP. SSLBlackbox includes components for client-side access to the remote servers using these protocols.

In particular, SSLBlackbox includes a client-side component to upload and download files using FTP / FTPS protocol. Other operations defined by FTP protocol specifications are supported as well. Note: FTPS (FTP over SSL) is not SFTP, which is SSH File Transfer Protocol and which is available in SFTPBlackbox package.

One of the recent additions to SSL/TLS family of protocols is Datagram TLS ( DTLS ), which is very similar to TLS. DTLS is used to protect UDP-based or other message-based network communications such as stream audio and video delivery. SSLBlackbox is one of the few solutions to provide client-side and server-side DTLS support.

Unlike symmetric encryption, securing communications with SSL/TLS doesn't require that the sides know the shared secret (password/encryption key). Also, the public key security (PKI) lets each side examine authenticity of the other side and prevent man-in-the-middle attacks. Another benefit of SSL/TLS is that PKI infrastructure is a widely-used technology, so implementation and maintenance of SSL/TLS-based solutions are quite simple tasks.

SSLBlackbox does not use CryptoAPI, OpenSSL or other third-party encryption library. For certificate creation, management and validation SSLBlackbox uses PKIBlackbox, base functions of which are included with SSLBlackbox package.

SSLBlackbox has been tested with numerous client-side and server-side SSL implementations, including Internet Information Server and Java 2 EE. SSLBlackbox includes special workarounds for SSL/TLS implementation flaws, found in this software.

SSLBlackbox is offered as an individual package and as a part of Professional, Standard and Transports packages.

SSL/TLS Protocol implementation contains the following features, common to both client-side and server-side components:

• complete support for SSL 2, SSL 3, TLS 1.x versions of the protocol;
• client and server DTLS (Datagram TLS) protocol support which lets you secure your UDP communications;
• flexible support for client-side certificate authentication;
• user-controlled validation of certificates;
• built-in compression;
• optional resuming of SSL sessions;
• support for Cryptocards and USB Crypto Tokens;
• authentication using pre-shared key (passphrase);
• authentication using OpenPGP keys (requires OpenPGPBlackbox);
• standard and custom TLS extensions;
• data transfer using events/callbacks, i.e. possibility to secure not only socket-based, but also other types of data exchange;
• support for key length from 512 to 16384 bits;
• support for RSA, DSA and DH public key algorithms;
• support for ECC-based cipher suites;
• data encryption with Camellia, AES (128 to 256 bit), Triple DES (3DES), DES, ARCFOUR, RC2 algorithms;
• integrity checking using HMAC, SHA1 and MD5 algorithms;
• asynchronous operation mode which lets you easily build synchronous and asynchronous applications

Client-side FTP / FTPS protocol implementation offers the following FTP and FTPS features:

• client-side support for FTP and FTP-over-SSL (FTPS) protocols;
• support for explicit and implicit TLS;
• compression (MODE Z) support;
• MLST command processing for easy parsing of directory listings;
• support for files over 4 Gb;
• custom commands;
• transfer resumption and partial transfers;
• file and directory commands (create and delete directories, rename files etc.);
• support for SOCKS and HTTP CONNECT (web tunneling) proxies;
• support for FTP proxies;
• active and passive mode with optional adjustment of the server address in passive mode;
• flexible support for client-side authentication in FTPS;
• bandwidth control;
• IPv6 support;
• DNSSEC support

SSLBlackbox includes a client-side HTTP / HTTPS protocol implementation, which offers the following HTTP features:

• client-side support for HTTP 1.0 and HTTP 1.1 including keep-alive requests and chunked encoding (the features required by HTTP 1.1);
• client-side support for HTTP over SSL (HTTPS);
• flexible support for client-side authentication in HTTPS;
• handling of GZip and Deflate compression;
• easy to use cookie management;
• support for files over 4 Gb;
• support for HTTP, SOCKS and HTTP CONNECT (web tunneling) proxies;
• support for "Windows Integrated" or NTLM authentication on both destination servers and proxy servers;
• easy to use data post capabilities with methods to post web forms and binary data streams;
• flexible redirection handling;
• bandwidth control;
• IPv6 support;
• DNSSEC support

SSLBlackbox includes a client-side SMTP protocol implementation, which offers the following SMTP features:

• client-side support for SMTP protocol;
• support for explicit and implicit TLS;
• support for binary transfer mode;
• the component can send both messages created by MIMEBlackbox and any other generated messages;
• flexible support for client-side authentication in SMTP over TLS;
• bandwidth control;
• IPv6 support

SMTP component is not available in ActiveX edition.

PKI Infrastructure - besides SSL/TLS features, SSLBlackbox includes base functions of PKIBlackbox.

Available editions
SSLBlackbox is available in several editions for various software platforms.

.NET edition. This edition of SSLBlackbox includes pure managed components, carefully optimized to achieve maximum performance, comparable to native processor code.
.NET edition requires .NET Framework 4.0, .NET Framework 3.5, .NET Framework 3.0, .NET Framework 2.0, .NET Framework 1.1, Silverlight 4, Silverlight 3, Mono 2.0, Mono 1.0, .NET CF (Compact Framework) 3.5, .NET CF 2.0, .NET CF 1.0.
.NET edition can be used on ASP.NET server systems, Windows desktop systems, Windows Mobile PDAs, Silverlight-enabled browsers, on Linux and MacOS X systems with Mono installed.

VCL edition. Blazingly fast native Delphi (Pascal) components for building native Windows and Linux applications. Usable with Delphi, C++ Builder or FreePascal (Win32 or x64, Linux/x86 or Linux/x64).
VCL edition works on any computer with Windows 98 and later or with Linux kernel 2.4 and later.

ActiveX/DLL edition. ActiveX controls and Dynamically-Linked Libraries are useable with virtually any development tool, which supports ActiveX or DLLs. This includes ASP web pages, Visual Basic 6 applications, native C/C++ applications for Windows, shell and server-side scripts.
ActiveX/DLL edition works on any computer with Windows 98 and later.

Support requests from customers with Priority support are served ahead of requests from regular customers and evaluation version users.