Module Name
CN6000 Series Encryptors
Caveat
When operated in FIPS mode
Embodiment
Multi-Chip Stand Alone
Description
The CN6000 Series are high-speed hardware encryption platforms that secure data over optical and twisted-pair Ethernet networks. Models included are the CN6100 10G Ethernet; operating at a line rate of 10Gb/s and the CN6040 1G Ethernet; operating at a line rate of up to 1Gb/s. Data privacy is provided by FIPS approved AES CFB and CTR algorithms. GCM is also available for applications that demand authentication. TRANSEC (aka Traffic Flow Security or TFS) can be used to remove patterns in network traffic and prevent traffic analysis.
Approved Algorithms
AES |
Certs. #A1567, #A1568, #A1569 and #A1583 |
CKG |
vendor affirmed |
CVL |
Cert. #A1583 |
DRBG |
Cert. #A1583 |
ECDSA |
Cert. #A1583 |
ENT |
NP |
HMAC |
Cert. #A1583 |
KAS |
Cert. #A1583 |
KBKDF |
Cert. #A1583 |
KTS |
AES Cert. #A1583 and HMAC Cert. #A1583 |
KTS-RSA |
Cert. #A1583; key wrapping; key establishment methodology provides 112 bits of encryption strength |
RSA |
Cert. #A1583 |
SHA-3 |
Cert. #A1583 |
SHS |
Cert. #A1583 |
Triple-DES |
Cert. #A1583 |
Hardware Versions
Senetas Corp. Ltd. CN6000 Series: A6040B (AC), A6041B (DC), A6042B (AC/DC), A6100B (AC), A6101B (DC) and A6102B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc CN6000 Series: A6040B (AC), A6041B (DC), A6042B (AC/DC), A6100B (AC), A6101B (DC) and A6102B (AC/DC); Senetas Corp. Ltd. & Thales CN6000 Series: A6040B (AC), A6041B (DC), A6042B (AC/DC), A6100B (AC), A6101B (DC) and A6102B (AC/DC)
Firmware Versions
5.2.0 and 5.2.1