Module Name

CryptoMod

Standard

FIPS 140-2

Status

Active

Sunset Date

3/2/2022

Validation Dates

03/03/2017

Overall Level

2

Caveat

When operated in FIPS mode. When installed, initialized and configured as specified in Section 3 of the Security Policy

Security Level Exceptions

• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

AutoSol’s CryptoMod is an end-point security device that protects data exchanged between remote industrial field devices and a centralized SCADA host. Installed in front of equipment, the CryptoMod encrypts traffic for the entire length of an industrial network. It provides authentication for controlling network access, integrity when data is in motion, and confidentiality. It is a CSA Class 1 Div. 2 Gr. ABCD device and a terminal server, so it can fit any existing industrial network. It has a hardware watchdog timer and the capability for remote configuration, management, and updates.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Cert. #4140
CVL	Cert. #946
DRBG	Cert. #1255
HMAC	Cert. #2713
PBKDF	vendor affirmed
RSA	Cert. #2257
SHS	Cert. #3410

Other Algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides 128 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); PBKDF (non-compliant)

Hardware Versions

CM5705-D9

Firmware Versions

1.0.51.FIPS