Request a POC

Conceptual visualisation. Sensitive files move into the CryptoSeal encryption engine, where readable names turn into ciphertext. A key-management node above the engine authorises each operation, and sealed data leaves for storage.

Home-grown Malaysian cryptography

Protect the data.Control the keys.

CryptoSeal encrypts sensitive files with AES-256, ChaCha20 or ThreeFish, and keeps key control with you: on a USB hardware security module your team holds, or through software and institutional key paths.

Request a proof of concept See how it works
  • MyCC EAL2 certified · Common Criteria (ISO/IEC 15408)
  • Malaysia Digital Status
  • Malaysian IP · Zetvest

The problem

Data and credentials both need to stay sealed.

Organisations face rising cyber threats, sticky-note password habits, and foreign cloud vaults outside Malaysian control. CryptoSeal protects what matters — encrypted data with D or XD, and credentials with Pass — without plain-text exposure.

  1. 01

    Files are readable by default.

    Reports, contracts and minutes are plain data. Anyone holding a copy holds the content.

  2. 02

    Passwords end up on sticky notes.

    Credentials drift into habits and places no one governs.

  3. 03

    Foreign vaults sit outside local control.

    Credentials stored in foreign cloud vaults sit outside Malaysian control.

Conceptual · Before and after CryptoSeal
  • Financial_Report.xlsxReadable
  • Board_Minutes_Q3.docxReadable
  • 8F A3 91 2C 7D 4E 10 B2 C4 0EProtected
  • Credential vault · AES-256-GCMProtected

D and XD protect files. Pass keeps credentials in an encrypted vault instead of on paper.

How CryptoSeal works

Data in. Protected data out.
Keys stay under your control.

Four stages, one continuous path: the same path the pipeline above illustrates.

  1. 01 · Data

    Choose the files that matter.

    Bring files into a protected workspace, or use dedicated controls to encrypt and decrypt files and folders.

  2. 02 · Encryption

    Seal with a supported engine.

    AES-256, ChaCha20 or ThreeFish turn readable content into ciphertext.

  3. 03 · Key control

    Authorise with your key path.

    A USB hardware security module with CryptoSeal-D, or software and institutional key paths with CryptoSeal-XD.

  4. 04 · Protected data

    Store or share it protected.

    Keep protected files where you work, or share them with approved external parties through CryptoSeal-XD.

Encryption technology

Three engines. One discipline.

CryptoSeal-D and CryptoSeal-XD support three established cipher engines today, so protection is not built around a single algorithm. CryptoSeal-Pass protects credentials with AES-256-GCM.

Block cipher

AES-256

The Advanced Encryption Standard with a 256-bit key, the widely adopted standard for protecting sensitive data.

256-bit key

Stream cipher

ChaCha20

A modern stream cipher, widely deployed across today’s secure communication protocols.

20 rounds · 256-bit key

Tweakable block cipher

ThreeFish

A tweakable block cipher from the Skein family, built on a different construction from AES.

Skein family

Cipher engines on CryptoSeal-D and XD
3
Key models: hardware-backed (D) and dongle-less (XD)
2
Platform to manage users, devices and licences
1

Key management

The key decides who can read.

CryptoSeal protects the data, and gives you a choice of key model. Pick the one that fits how your organisation works.

Side A · Protected data

Ciphertext, not content.

Files encrypted with AES-256, ChaCha20 or ThreeFish. Opening them takes an authorised key path.

Side B · Key control

Authority stays with you.

Choose the key model for the deployment, and manage users, devices and licences from one platform.

Authorised key pathUSB HSM · Software · Institutional

CryptoSeal-D

Keys generated and stored on a USB HSM. Your team keeps physical control.

CryptoSeal-XD

Software and institutional key paths. Approved external parties do not need a dongle.

Illustrative 3D rendering of the CryptoSeal-D USB hardware security module
CryptoSeal-D · Illustrative rendering

Hardware security

A key you can hold.

Protect your files with encryption keys held in a USB hardware security module. Your team keeps physical control of the key.

Key storage
Generated and stored in the USB hardware security module, under physical control.
Sessions
Encryption operations bound to the presence of the authorised dongle.
Management
Users, devices and licences, managed from the same CryptoSeal platform.
Without hardware
CryptoSeal-XD works without a dongle, using software and institutional key paths.
Explore CryptoSeal-D

Security assurance

Stated plainly.

The assurance behind CryptoSeal, shown as it stands in our current materials. Nothing added.

Common Criteria

MyCC EAL2

The CryptoSeal solution is certified to MyCC EAL2 under Common Criteria (ISO/IEC 15408).

Recognition

Malaysia Digital Status

Recognised under Malaysia Digital, the national programme led by MDEC.

Ownership and hosting

Malaysian IP. Local support.

Proprietary technology from Zetvest. CryptoSeal-Pass has 100% Malaysian hosting, with no foreign credential silos.

Ask us for the certificate details.

Where it fits

Matched to how you work.

The same family covers different jobs. What changes is who holds the key, and who needs to open the protected data.

01

CryptoSeal-D

Regulated and controlled environments

Physical key custody for regulated, on-premises operations.

02

CryptoSeal-D

Control over who holds the key

For organisations that need to decide who holds the encryption key.

03

CryptoSeal-D · XD

Central oversight

Manage users, devices and licences from the same CryptoSeal platform.

04

CryptoSeal-XD

Vendors and approved external parties

Share protected data with approved parties who do not need a dongle.

05

CryptoSeal-XD

Teams without USB keys

Encrypt without issuing hardware keys, using software and institutional key paths.

06

CryptoSeal-Pass

Business and personal credentials

A credential vault flexible enough for work and for home.

The product family

One family. Three products.

Start with the job. Select a need to see the matching CryptoSeal product.

Illustrative 3D render of the CryptoSeal-D hardware enclosure
CryptoSeal-D · Illustrative rendering

Physical key custody

CryptoSeal-D:

Your key. In your hands.

A USB hardware security module anchors encryption to an authorised key, keeping cryptographic key custody physical.

For regulated and controlled environments

Explore CryptoSeal-D

Start with a conversation

Protect what matters.

Tell us what you need to secure. We’ll help you find the right CryptoSeal product and deployment model, then put it to work in a proof of concept.

Request a proof of concept Compare D, XD and Pass
[email protected]