SONET Encryption

SafeNet SONET Encryptor

High Performance Security Solution Providing Seamless Integration

The SafeNet SONET Encryptor is a high performance, dedicated security solution to protect 10 Gbps and below SONET/SDH networks.  It integrates easily and transparently into SONET/SDH networks and performs at wire-speed throughput, encrypting user data with the AES-256 algorith.

Extremely low latency makes it ideal for even the most demanding real-time, latency-sensitive network applications.

• FIPS 140-2 Level 3 validated

Supports Path and Line SONET/SDH Encryption

The SafeEnterprise SONET Encryptor supports both path and line SONET/SDH encryption at various rates and at distances up to 40 kilometers (OC48/STM16 Encryptor) or 80 kilometers (OC192/STM64 Encryptor).

For added security, each encrypted circuit uses an independent encryption key pair. In addition, section, line, and path overhead bytes can be selectively encrypted, zeroised, regenerated, or bypassed.

Centralized Management or Multiple Remote Capabilities

The SafeNet SONET Encryptor can be centrally controlled or managed across multiple remote stations using SafeNet's Security Management Center (SMC), which uses SNMPv3, the first secure version of SNMP.  SMC management is available via an Ethernet port or in-band on the SONET/SDH network.

Network Interfaces

• OC192/STM64 (10 Gbps)
• OC48/STM16 (2.5 Gbps)
• OC12/STM4 (622 Mbps)
• OC3/STM1 (155 Mbps)

Cryptography

• AES algorithm – 256-bit key
• Automatic cryptographic resynchronization in less than 10μs

Key Management

• ATM Forum security Specification v1.1 Key Exchange
• RSA 2048 public key
• Automatic session key update

Performance

• Constant non-cumulative delay of less than 10μs
• Full-duplex operation at all line speeds

Audit

• Event Log
• Alarms
• Interface status
• Audit Log
• Date and time of secure connection
• Configuration changes

Environmental

• 5° to 40° C operating temperature
• -10° to 60° C non-operating temperature
• 0 to 80% RH @ 40° C operating humidity
• 95% RH @ 40° C non-operating humidity

Electrical

• 90VAC to 250VAC, 110 watt maximum, 47-63Hz
• -48VDC, 40 watt maximum

Mechanical

Height

• OC48/12/3 - 41mm (1RU)
• OC192 - 130mm (3RU)
• Width – 435mm
• (19” rack -mountable)
• Depth – 285mm

Weight

• OC48/12/3 - 4.5kg
• OC192 – 9.5kg

Features:

• Full-duplex speeds up to 10 Gbps
• First commercially-available OC48/STM16 and OC192/STM64 SONET encryptors
• Configurable as a path or line encryptor
• Employs federally-endorsed, highly secure AES algorithm
• Fully automated key management using X.509 certificates for authentication
• OC3 (STM1), OC12 (STM4), OC48 (STM16), and OC192 (STM64) interface options
• In-band management through the Security Management Center (SMC) using SNMPv3
• Designed to international security standards
• FIPS 140-2 L3