The two documents confirm different parts of the same solution: the correct implementation of
cryptographic algorithms and security mechanisms, as well as the possibility of using devices
from the family for qualified electronic signatures and electronic seals.

Why are there two expert conclusions?

At first glance, the two documents look very similar. They were issued on the same day, both relate
to a cryptographic information protection device based on the JCOP 4.5 platform,
and they have the same validity period. In practice, however, each document covers a different
part of the expert evaluation.

Put simply, the first document answers the question
“Is the cryptographic part implemented correctly?”, while the second answers
“Can a device built on this platform be used for qualified electronic signatures?”

View the documents:

Expert conclusion on the qualified electronic signature device
Expert conclusion on the implementation of cryptographic algorithms

What was evaluated?

The cryptographic component of CYBKEY U45 is based on the JCOP 4.5 platform. As part of the
expert evaluation, the implementation of the main cryptographic mechanisms used by the device
was examined.

In particular, the conclusion confirms the correct implementation of the digital signature
generation and verification algorithm defined by DSTU 4145-2002,
the ECDSA algorithm, elliptic-curve key agreement mechanisms,
AES encryption with 128-bit and 256-bit keys, and CMAC.

The expert evaluation also confirmed that the implemented authentication mechanisms meet the
applicable requirements and that the protection methods comply with the requirements for
Class B2 cryptographic information protection devices.

For most users, the names of individual cryptographic algorithms may sound highly technical.
Their practical meaning is much simpler: the cryptographic foundation of the device was not
merely declared by the developer — it underwent a separate expert evaluation.

The key result: use as a QES device

The second expert conclusion focuses on the functional security requirements for a signature
creation device.

The document states that the implemented mechanisms comply with the requirements of the
DSTU EN 419211 series of standards, which define protection profiles for
secure signature creation devices.

From a practical point of view, the most important result for CYBKEY U45 is that the evaluated
device may be used as a qualified electronic signature or electronic seal device for
the provision of electronic trust services.

Hardware protection of private keys is one of the main reasons why businesses and government
institutions should distinguish ordinary file-based key storage from the use of a secure hardware token for electronic signatures,
where cryptographic operations are performed inside the device.

CYBKEY U45 is a family of devices, not a single product

From the beginning, Smart Lab developed the platform not around one universal enclosure, but
around the ability to use the same protected technological foundation in different scenarios.
CYBKEY U45 is therefore a family of devices available in different form factors.

CYBKEY U45C

CYBKEY U45C

is implemented as an electronic signature smart card. This format is convenient in environments
where electronic signatures are used regularly: corporate systems, government institutions,
electronic document management systems, or as part of an electronic employee ID.

The card can serve as a personal physical carrier for the user while also functioning as a
protected hardware device for electronic signature operations.

CYBKEY U45T

CYBKEY U45T is a version of the platform in a USB token form factor.
This is a familiar format for users who need a compact standalone device for secure key storage
and cryptographic operations.

USB tokens are especially relevant when QES is used at the workplaces of accountants,
managers, or employees of public institutions. One practical scenario is working with Treasury keys and secure QES carrier.

At the time of publication, the production enclosure for CYBKEY U45T is still being designed.
Smart Lab will present the final appearance of the device at a later stage.

CYBKEY U45CF

Another direction in the development of the family is CYBKEY U45CF,
a card equipped with a fingerprint scanner.

This form factor combines the capabilities of an electronic signature card with a biometric
component and expands the range of solutions for scenarios where it is important not only to
keep a key inside a protected hardware environment, but also to use an additional user
identification mechanism directly through the device.

Smart Lab will publish detailed technical specifications of CYBKEY U45CF separately.

Why this matters for Smart Lab

Developing a proprietary device for qualified electronic signatures involves much more than
creating electronic hardware and implementing a set of cryptographic algorithms.

Such a product goes through several stages — from hardware and software design to testing,
verification of implemented security mechanisms, and state expert evaluation.

The expert conclusions mark the completion of one of the most important stages in the
development of the CYBKEY U45 family. Smart Lab now has a common evaluated technological
foundation on which it can continue developing conventional QES hardware carriers,
electronic signature cards, biometric devices, and digital identity solutions.

One technological foundation for different use cases

Organizations have different requirements for how employees work with electronic signatures.
In one environment, a USB token may be the most convenient option. In another, a personal smart
card may fit the existing infrastructure better. Some scenarios may also require additional
authentication mechanisms.

The underlying cryptographic platform remains common across these form factors. This allows
CYBKEY U45 to develop not as a collection of isolated devices, but as a single product family
that can be adapted to the needs of businesses, government institutions, and organizations
with increased information security requirements.

The expert conclusions are valid until 2031

Both expert conclusions were issued on August 10, 2026.
They are valid until August 10, 2031.

The conclusions apply to CYBKEY U45 family devices manufactured in accordance with the
approved technical specifications.

Smart Lab documents:

Expert conclusion on the qualified electronic signature device

Expert conclusion on the implementation of cryptographic algorithms

The next stage: expanding the product family

Completion of the state expert evaluation is not the final point in the development of
CYBKEY U45. Rather, it marks the completion of one of its most demanding stages.

Smart Lab continues to work on different form factors within the family. Some products are
already presented on the website, while others are being prepared for serial production
and separate presentation. Current Smart Lab solutions are available in the
Products section.

We will soon provide more detailed information about individual CYBKEY U45 models,
their design, capabilities, and use cases.

CYBKEY U45

Looking for a secure QES solution?

Smart Lab can help you choose the right secure electronic signature carrier for a business,
government institution, or corporate information system, and advise you on the capabilities
of the CYBKEY U45 family.

Get a Consultation