Module Name

CN Series Ethernet Encryptors

Standard

FIPS 140-2

Status

Active

Sunset Date

11/14/2021

Validation Dates

11/15/2016;06/02/2017

Overall Level

3

Caveat

When operated in FIPS mode.

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

The CN4010, CN4020 and CN6010 are high-speed hardware encryption modules that secure data over twisted-pair Ethernet and optical networks. The modules support data rates to 1Gb/s and 100Mb/s and 10Mb/s modes. The CN6010 is also equipped with pluggable SFPs to support a variety of optical network interfaces. Data privacy is provided by FIPS approved AES CFB and CTR algorithms and GCM for applications that demand authentication. Additional transmission security is provided via TRANSEC (Traffic Flow Security) which can be used to remove patterns in network traffic and prevent traffic analysis.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Certs. #3977, #4003, #4004 and #4005
CVL	Cert. #807
DRBG	Cert. #1170
ECDSA	Cert. #876
HMAC	Cert. #2595
KAS	Cert. #81
RSA	Cert. #2039
SHS	Cert. #3282
Triple-DES	Cert. #2182

Other Algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Hardware Versions

Senetas Corp. Ltd. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. & SafeNet Inc. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC)

Firmware Versions

2.7.1 and 2.7.2