Fast and easy Digital Quantum Secured Electronic Signature now embeds a QRNG chip source to meet some of the most stringent security, privacy, and data residency requirements (FIPS / CC).
All over the world, millions of users trust DocuSign to sign their contracts and agreements.
The DocuSign Qualified Signature Creation Device (QSCD) is a highly secure, high capacity, network attached HSM designed to meet the most stringent security, privacy, and data residency requirements (FIPS / CC). It’s a multi-chip standalone appliance which consists of COTS hardware, tamper resistance hardware, a hardened operating system, a database and server software.
Including a QRNG source of entropy, it has been validated to all FIPS 140-2 Level 3 requirements. The user interacts with the QSCD via the SSA (Web Server Signing Application) for the purpose of performing cryptographic operations such as digitally signing a document/data or performing AES encryption/decryption.
The DocuSign QSCD Appliance has a hardware-based entropy source (IDQ’s Quantis IDQ6MC1 chip) that meets the requirements of NIST SP 800 90B. The IDQ6MC1 is a quantum random number generator that generates entropy directly from a quantum process.
Entropy is the foundation for security processes most importantly for making security keys. QRNG provides the strongest entropy random source for quality of cryptographic keys produced. Docusign’s appliances generate millions of keys to provide the best security to their users.
The seed data output from the entropy source chip is continuously tested according to the requirements of NIST SP 800 90B. Two tests are being performed on the stream of random data produced by the chip: Repetition Count Test and Adaptive Proportion Test.
DocuSign’s QSCD Appliance performs time stamp, authenticate ‘person’ signing, and integrity of document and uses QRNG entropy for the strongest security.
More than a million customers and a billion users trust DocuSign with their critical and essential agreements. From sales contracts and offer letters to account openings and invoices, DocuSign eSignature is the world’s #1 way to send and sign from practically anywhere, at any time. It enables remote work to be done faster and easier