GemSafe pre-personalisation can also be proposed on GemXpresso R3.2 cards, with card manager unlocked and/or with other applets (than GemSafe applet) installed. Refer to GemXpresso Pro for further details.

General Specifications
· Based on JavaCard Virtual Machine, compliant with JC2.1.1
· Card Management & API compliant with OP2.0.1'
· Baud rates up to 115Kbps

Cryptographic features
· Cryptographic algorithms: 3DES (ECB, CBC), RSA up to 2048bit & SHA-1
· 6 x RSA key containers (GemSafeXpresso 16K)
· 10 x RSA key containers (GemSafeXpresso 32K)
· RSA key length up to 2048 bits
· On board Key Generation
· RSA Key injection
· Digital Signature
· Session key decipherment
· Secure messaging
· Entrust (v6 and above) compliant
· User PIN and Admin PIN support

Security
GemSafeXpresso supports all the necessary security mechanisms to protect sensitive data: protection by PIN, External Authentication, Role, Secure messaging.
This product includes also multiple hardware and software counter measures against the following attacks:
· Side channel attacks (SPA, DPA, Timing attacks,?)
· Invasive attacks
· Fault attacks
· Other types of attacks