Module Name

CN Series Ethernet Encryptors

Standard

FIPS 140-2

Status

Active

Sunset Date

7/8/2024

Validation Dates

07/09/2019

Overall Level

3

Caveat

When operated in FIPS mode and installed, activated, and configured per Security Policy section 8.3

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

The CN4010, CN4020, CN6010 and CN6140 are high-speed hardware encryption platforms that secure data over twisted-pair and optical Ethernet networks. The modules support line rates from 10Mb/s to 10Gb/s. The CN4020, CN6010 and CN6140 are equipped with pluggable transceivers to support a variety of optical network interfaces. Data privacy is provided by FIPS approved AES algorithms in CFB, CTR and GCM modes. Additional transmission security is provided via TRANSEC (Traffic Flow Security) which can be used to remove patterns in network traffic and prevent traffic analysis attacks.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Certs. #4404, #4405, #4406, #4412, #4413 and #4553
CKG	vendor affirmed
CVL	Cert. #1232
DRBG	Cert. #1503
ECDSA	Cert. #1108
HMAC	Cert. #3007
KAS	Cert. #123
KTS	vendor affirmed
KTS	AES Cert. #4553 and HMAC Cert. #3007; key establishment methodology provides between 128 and 256 bits of encryption strength
RSA	Cert. #2480
SHS	Cert. #3731
Triple-DES	Cert. #2424

Allowed Algorithms

Diffie-Hellman (CVL Cert. #1232, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1232, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Hardware Versions

Senetas Corp. Ltd. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC); Senetas Corp. Ltd. CN6140 Series: A6140B (AC), A6141B (DC) and A6142B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. & SafeNet Inc. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN6140 Series: A6140B (AC), A6141B (DC) and A6142B (AC/DC)

Firmware Versions

3.0.3