Abstract: A cryptographic device being remotely modified only by proper authorization. The cryptographic device comprising a processor, non-volatile memory and a bus interface. The non-volatile memory stores at least a public key of an upgrade entity and possibly a public key of a regulatory entity, a unique, device-specific encryption/decryption key pair and/or internal memory for storing cryptographic programs. The processor processes the cryptographic programs to modifying contents of the non-volatile memory based on an upgrade directive within an upgrade message transmitted by the upgrade entity to the cryptographic device.