EDITORIAL CONTACTS:
PRCS47SM9159
Klaudeen Shemirani
Cunningham Communication, Inc. for HP
+1 (650) 858-3863
kshemirani@ccipr.com

Rochelle Cohen
AT&T Public Relations
+1 (202) 457-3933
racohen@att.com

HP ADDS COMMON DATA SECURITY ARCHITECTURE (CDSA) TO HP-UX 11 AND LICENSES AT&T CRYPTOGRAPHIC LIBRARIES
Tools Simplify Development and Export of Secure E-commerce Applications

 PALO ALTO, Calif., June 16, 1999 -- Hewlett-Packard Company and AT&T today announced immediate availability of CDSA (Common Data Security Architecture), The Open Group standard software security framework, for HP-UX(1) 11, HP’s business-critical proven 64-bit UNIX(R) operating system. HP also announced an agreement to license AT&T encryption technology for three CDSA Cryptographic Service Providers (CSPs). This added capability gives application developers a comprehensive set of encryption and public key infrastructure (PKI) application interfaces to simplify and reduce the cost of secure application development. The new security package, HP Praesidium CDSA Version 1.2, will be available at no charge to all HP-UX 11 customers.

 HP-UX 11, now with CDSA, is a fundamental component of e-services that encompasses application, network and platform security. HP-UX 11 integrated security features include IPSec, the leading standards-based virtual private network technology; secure remote user authentication via Kerberos v.5; and compliance to the U.S. government’s TCSEC C2 standard. This announcement underscores the end-to-end security solutions for HP-UX and HP’s Praesidium products.

 CDSA, originally developed by Intel, gives application developers flexibility, consistency and portability when implementing security applications. By writing to one common API, a software developer can easily add authentication features, encryption services and the ability to manage security processes. Developers can focus on a single PKI API for all security services. CDSA-enabled applications can be run on any HP-UX 11 platform and exported worldwide after a one-time U.S. Department of Commerce review.

 "HP customers need rock-solid security across their business applications and IT infrastructure," said Patrick Rogers, worldwide marketing manager of HP’s Business Critical Computing Business Unit. "CDSA makes it easy for HP-UX 11 developers to incorporate strong security features into their applications and distribute them worldwide. HP continues to deliver on its promise to provide a high-performance, end-to-end secure computing environment."

 Initially, three CDSA CSPs will be available for HP-UX 11. Developed by AT&T, these cryptographic libraries provide varying levels of security. Two of the libraries meet all U.S. Department of Commerce regulations for export, while the third is intended only for use in North America.

 The CSPs perform cryptographic operations such as data encryption, message digest hashing and digital signatures. They offer the following basic cryptographic functions: DES, CDMF, RC2, RC4, Diffie-Hellman, DSA, RSA, SHA-1, MD5, HMAC SHA-1, HMAC MD5, OAEP and random number generation. All of these algorithms and protocols conform to the relevant FIPS, ANSI and IEEE standards.

 "We are extremely pleased with the OEM agreement between AT&T and HP," said Tony Cira, division manager, AT&T. "It will enable HP customers to achieve higher cryptographic performance than before and at no cost. Customers will benefit from the strong history of cryptographic excellence at AT&T."

 Pricing and Availability

HP Praesidium CDSA Version 1.2 is included at no charge on the
HP-UX 11 Application Release CD, which is available now to all HP-UX 11 customers.

 About AT&T

AT&T (http://www.att.com) is the world’s premier provider of voice and data communications with more than 90 million customers, including consumers, businesses, and government. With annual revenues of nearly $51 billion and 126,000 employees, AT&T provides services to more than 280 countries and territories around the world. AT&T runs the world’s largest, most sophisticated communications network and the largest digital wireless network in North America. The company is a leading supplier of data and Internet services for businesses and the nations largest direct Internet service provider to consumers. AT&T provides outsourcing, consulting and networking-integration services to large businesses. The company also offers outbound local calling to businesses in 49 states and remains committed, as conditions permit, to delivering local telephone service to consumers. AT&T’s businesses are backed by the research and development capabilities of AT&T Labs, which is working to create the information services and communications network of tomorrow.

 AT&T Government Markets, based in Washington, DC (http://www.att.com/gov/), offers leading-edge communications and networking solutions to Federal government agencies.

 About HP

Hewlett-Packard Company -- a leading global provider of computing and imaging solutions and services for business and home -- is focused on capitalizing on the opportunities of the Internet and the proliferation of electronic services.

 HP had computer-related revenue of $39.5 billion in its 1998 fiscal year. HP plans to launch a new company consisting of its industry-leading test-and-measurement, semiconductor products, chemical-analysis and medical businesses. These businesses represented $7.6 billion of HP’s total revenue in fiscal 1998. With leading positions in multiple market segments, this technology-based company will focus on opportunities such as communications and life sciences.

 HP has 123,000 employees worldwide and had total revenue of $47.1 billion in its 1998 fiscal year. Information about HP, its products and the company’s Year 2000 program can be found on the World Wide Web at http://www.hp.com.

 # # #

 (1) HP-UX Release 10.20 and later and HP-UX Release 11.00 and later (in both 32- and 64-bit configurations) on all HP 9000 computers are Open Group UNIX 95 branded products.

UNIX is a registered trademark of The Open Group.