Overview
Senetas CS10 Ethernet encryptors are flexible encryption platforms designed as desk top systems that can be integrated into modern Ethernet networks. The units can encrypt either layer 2 (Ethernet) or layer 3 (IPSec) protocols and can be configured point to point or multipoint operation at speeds of up to 10 Mbps.
The Senetas CS encryption family is a flexible new encryption platform that provides a purpose built data security solution for both point-point and fully meshed layer 2 & layer 3 Ethernet networks.
The Senetas CS platform provides extreme versatility in performance, security and cost-effectiveness and is capable of securing both layer 2 (Ethernet) and layer 3 (IP) networks at line rates up to several hundred Megabits per second (model shown is up to 10Mbps only).
The platform is crypto-agile and supports user loaded algorithms via a simple software toolkit.
• VLAN, MPLS transparency allowing flexible configuration
• Hands-off automated key management
• Standards based trust model using X.509 certificate authentication
• Centralised CypherManager configuration and management system
• Tamper resistant and tamper evident enclosure
• Interoperable with Senetas CS10, CS100 and CN3000 series Ethernet encryptors
• Switchable between layer 2 and layer 3 (IPSec) modes. IPSec mode implements ESP tunnel
Applications
The CS10 provides users with flexible encryption that addresses the needs of small to medium sized organisations that have a requirement to transfer sensitive information between branch offices. The units can be used to secure point to point links or used in a meshed network of up to 509 interoperable units.
The unit operates in full-duplex mode at full line speed. Latency is a function of transmission speed and packet size and is typically 1-5 milliseconds.
Specification
Cryptography
AES encryption algorithm
128 or 256 bit session keys
Self synchronising CFB mode
256 bit master keys
Optional algorithms (SEED, Aria, Camellia, custom)
Key Management
ATM Forum V1.1 specification
X.509 certificate authentication
RSA Public key Infrastructure
Periodic automatic key updates
Master and Session keys
Performance
Auto-negotiation of line speed
Speed of up to 10Mbps
Latency 5 milliseconds (typical)
(19 microsec at 100Mbps, 150 microsec at 10Mbps)
Management
CypherManager element manager
IPv4 and IPv6 management support
Automatic encryptor discovery
SNMPv3 control, SNMPv1 monitoring
Out-of-band and Inband management
Alarm, Event, and Audit logs
SNMP traps and monitoring
RS232 local console (CLI)
Certification
Common Criteria EAL4+ Front Panel
LED’s for interface, security, temperature, alarms, power.
Rear Panel
RJ45 Local and Network connectors
RJ45 and DB9 Management connectors
Plug pack socket
Installation
Size – 185mm, 42mm, 160mm (WxHxD)
Weight: – 630 gram
0o to 40oC operating temperature
0 to 80% RH at 40oC operating
Shipping/Storage
Size – 350mm, 180mm, 280mm, (WxHxD) – 2 units
Weight – 1.2Kg (1 unit) – 2.0 Kg (2 units)
Max temperature 40oC, 95% RH at 400
Physical Security
Tamper proof Key and user password storage
Tamper resistant/evident case
Anti probing barriers
Power Requirements
90-240 VAC / 47-63 Hertz Plug pack (7-20 VDC)
6 watts (20 watts maximum)
Regulatory
Emissions – FCC Part 15 Class B
RoHS compliant
Other – CE and N3912