Asynchronous operation mode, on the other hand, gives you flexibility and complete control over your application communications. Synchronous operation mode gives you a linear programming approach without complicated callback functions. This approach saves your development time and reduces the number of errors. Simple SecureBlackbox components can be used for reliable data transfer no matter what type of proxy or firewall is used to protect the network. You can process huge files and not be bound by restrictions of 32-bit environments. This feature works on both 32-bit and 64-bit systems without any limitations. Cryptographic hardware gains more and more popularity every day. If your software deals with X.509 certificates or PKI in general (RSA keys etc.), it is time to support cryptocards and USB tokens. SecureBlackbox was written from the ground up by EldoS Corporation developers. It doesn't use third-party code to implement its cryptographic functions. This means that you are not bound by CryptoAPI or OpenSSL version when you need to use certain algorithm.
At the same time it's possible to plug third-party security libraries and hardware modules by utilizing the pluggable architecture of SecureBlackbox. No royalties means the licensing procedure which is clear and easy to understand and manage. Pay for the license once and use it for development and deployment with no other payments. We provide free technical support via web-based Forum and HelpDesk. Support is available for everyone, and the requests from clients who purchased a license are given priority. Also you can use our extensive knowledgebase. With SecureBlackbox you get not just SSL support, but also feature-rich components for PKI support. This includes creation and management of X.509 certificates, certificate requests and CRLs, PKI-based data encryption and signing operations, digital timestamping and more.

You don't need a separate solution to generate and manage your certificates. With the wide choice of encryption, authentication and key exchange algorithms supported by SSLBlackbox, you will be able to meet the security requirements and get compatibility with the wide choice of differently configured servers and clients. The widest possible protocol support lets you get all that you can from SSL / TLS and that your software is compatible with the widest choice of client and server software. SSL session resumption speeds up subsequent session initiation and reduces server and network load. Resumption is supported by many SSL / TLS clients and servers. Validation of the other party's certificate is usually much more than just verifying the cryptographic signature. Correct validation includes verification of validity of the certificate and all of its issuer certficates, sometimes using CRLs (certificate revocation lists) and requests to the issuer servers using OCSP protocol. With SSLBlackbox you can build your own verification procedures easily. Usually only the server is authenticated during SSL / TLS handshake. But the situations when the client needs to authenticate itself using X.509 certificate become more and more often. Unfortunately most SSL/TLS and HTTPS or FTPS components don't provide support for client-side authentication.

SecureBlackbox provides full support for client-side certificate authentication in its server-side and client-side components. Originally SSL protocol used X.509 certificate for authenticating servers and clients. This type of authentication remains the most popular now. However various security needs and hardware limitations caused introduction of the alternative authentication methods. They are pre-shared key authentication (it can be named "password-based") and OpenPGP-based authentication (using OpenPGP keys instead of X.509 certificates).

Each of the alternative authentication methods has its own strengths and usage scenarios. SecureBlackbox provides full support for these new authentication methods. TLS extensions are used to extend functionality of the TLS communication, transfer additional information and provide better service to the parties. With the wide choice of encryption, authentication and key exchange algorithms supported by SecureBlackbox, you will be able to meet the security requirements and get compatibility with the wide choice of differently configured servers and clients. SecureBlackbox supports the keys of any length, used in modern computing. If you need more strength, you can generate and use 4096-bit keys without problems. Application-level protocols, such as HTTP, FTP and SMTP, can work in two modes - explicit and implicit. In implicit mode first SSL connection is established, then protocol connection is carried over the protected channel. In explicit mode the TLS connection parameters are negotiated using the command on the protocol level.

FTP and SMTP transports support implicit and explicit modes. This lets you connect to greater number of servers which use SSL/TLS for security. Most FTP servers support REST command, but not all clients are able to properly use this support. With FTPS Transport you can transfer parts of the files.

If the transfer is interrupted you can always resume it. And if you need to upload or download only a part of the file, you can transfer the needed part without the need to process the whole file. While not very popular ourdays, FTP proxy servers are sometimes used. They are necessary when the client application is behind the firewall, but needs access to the outside world. Not all FTP clients support FTP proxies. With FTPS Transport FTP proxies are not a problem. Some FTP servers are placed behind the firewall. When you connect to them in passive mode, they give you their LAN IP address for the data channel. With most clients such behaviour leads to impossibility to transfer the data. But not with FTPS Transport, which can detect such situation and adjust the address automatically, letting you successfully transfer the data.