High-Capacity Wire-Speed Encryption Modules

All Products Technical documentation Share

Ask the community All Products Technical documentation Share

Designed to secure today’s web-scale networks, Ciena's High-Capacity Wire-Speed Encryption Modules for the 6500 cost-effectively enable a flexible 10G, 100G, or 200G protocol-agnostic encryption solution. These modules combine ease of operation and administration for a simple-to-implement data protection strategy for Ethernet, Fibre Channel, SONET/SDH, and OTN services.

Features

Offers an ultra-low-latency wire-speed encryption solution for highly secure and transparent end-to-end communications

Features protocol-agnostic encryption, offering flexibility to support a variety of services

Secures all critical in-flight data via FIPS-compliant Advanced Encryption Standards (AES256) encryption solution

Leverages two distinct sets of keys for authentication and data encryption functions, with a fast encryption key rotation interval of seconds

Integrates seamlessly into existing enterprise Public Key Infrastructures (PKIs) using X.509 certificate-based authentication

Enables secure management of Encryption-as-a-Service capability by the end-user in carrier- or enterprise-managed infrastructures via an integrated management tool

Delivers a field-proven encryption solution widely deployed across the globe in finance, utility, healthcare, military, and government networks

Specs

+ Technical Information

Circuit Pack		4x10G OTR with encryption	WaveLogic 3 Extreme line module with encryption
System Requirements		Operates in any 6500 S/D-Series chassis	Operates in any 6500 S/D-Series chassis except for the 6500-D2
Port Format Client supported interfaces		OC-192/STM-64 10GbE LAN, 10GbE WAN FC400, FC800, FC1200 OTU2, OTU2e	OC-192/STM-64 10GbE LAN, 10GbE WAN, 40GbE, 100GbE FC800, FC1200 OTU2, OTU2e, OTU3, OTU4, ODU-Flex
Line supported interfaces		OTU2 OTU2e	Coherent 100G (QPSK); 1xOTU4 Coherent 200G (16QAM); 2xOTU4
Protection Options		1+1 line protection 1+1 client and equipment protection	1+1 line protection 1+1 client and equipment protection
FEC Modes		G.709 compliant RS-8 FEC, UFEC, and OFF	Soft FEC
Environmental Characteristics Operating Temperature Relative Humidity Altitude	+41° F to +104° F (+5° C to +40° C ); +23° F to +131° F (-5° C to +55° C ) short term – for 6500-D2/D7/S8/D14/S14 +23° F to +122° F (-5° C to +50° C ) short term – for 6500-S32 5% to 85% (non-condensing) 13,000 ft; 4000 m
Physical Characteristics	11.34 in (H) x 0.99 in (W) x 9.34 in (D) 288 mm (H) x 25 mm (W) x 237 mm (D)
Security features	- NIST certified AES-256 encryption solution for data encryption - Elliptic Curve Cryptography (ECC) algorithms - Diffie-Hellman secured key negotiation (including Elliptic Curve) - X.509 certificate support for authentication - Support for Certificate Revocation List (CRL) - Hitless AES-256 key rotation every second - TLS-secured and mutually authenticated interface for encryption management - Radius authentication support - TACACS+AAA - SNMPv3 support
Security features	- 2048-bit RSA certificates - Elliptic Curve certificates	- Elliptic Curve certificates
Certifications		- Common Criteria Network Device Collaborative Protection Profile - BSI (German Federal Office of Information Security) - FIPS 140-2 Level 3 – Certificate #2379, #2635 - FIPS 197 – AES–256 – Certificate #2963, #2964, #3599, #3600 - IBM GDPS - EMC, Brocade	- Common Criteria Network Device Collaborative Protection Profile - BSI (German Federal Office of Information Security) - FIPS 140-2 Level 2 – Certificate #2697, #2843 - FIPS 197 – AES–256 – #3601, #3602, #4231, #4232, #5241 - IBM GDPS - EMC, Brocade