Content deleted Content added
No edit summary |
|||
| (25 intermediate revisions by 21 users not shown) | |||
Line 1:
{{Short description|Encryption device}}
{{multiple issues|
{{cleanup|date=March 2012}}
Line 4 ⟶ 5:
{{refimprove |date= February 2008}}
}}
{{Use mdy dates|date=March 2025}}
A '''High Assurance Internet Protocol Encryptor''' ('''HAIPE''') is a [[Type 1 encryption]] device that complies with the [[National Security Agency]]'s HAIPE IS (formerly the HAIPIS, the High Assurance Internet Protocol Interoperability Specification).
==Examples==
Examples of HAIPE devices include:
* [[L3Harris Technologies]]' Encryption Products<ref>[https://www2.l3t.com/cs-east/what-we-do/products/encryption-products_red-eagle.htm L-3 Communication Encryption Products]</ref>
** KG-245X
** KG-245A fully tactical 1
** RedEagle
* [[ViaSat]]'s AltaSec Products<ref>[http://www.viasat.com/government-communications/information-assurance/ ViaSat Information Assurance web page]</ref>
** KG-250,<ref>[http://www.viasat.com/government-communications/information-assurance/altasec-kg-250 ViaSat KG-250]</ref> and
** KG-255 [1
* [[General Dynamics Mission Systems]]
** FLEX (KG-175F)
*Airbus Defence & Space ECTOCRYP Transparent Cryptography <ref>[http://www.cassidian.com/pl/web/guest/1307 Ectocrypt Blue by Cassidian, an EADS Company]</ref><ref>{{cite web|url=http://www.cassidian.com/en_US/web/guest/cassidian-unveils-ectocryp-yellow|title=CASSIDIAN unveils ECTOCRYP YELLOW|date=September 2013}}</ref>▼
** 10G (KG-175X)
** Nano (KG-175N)
▲* Airbus Defence & Space ECTOCRYP Transparent Cryptography
Three of these devices are compliant to the HAIPE
A HAIPE is an IP encryption device, looking up the destination IP address of a [[Network packet|packet]] in its internal Security Association Database (SAD) and picking the encrypted tunnel based on the appropriate entry. For new communications, HAIPEs use the internal Security Policy Database (SPD) to set up new tunnels with the appropriate algorithms and settings. Due
A couple of new HAIPE devices will combine the functionality of a router and encryptor when HAIPE IS version 3.0 is approved. General Dynamics has completed its TACLANE version (KG-175R), which house both [[Red/black concept|a red and a black]] Cisco router, and both ViaSat and L-3 Communications are coming out with a line of network encryptors at version 3.0 and above.
Both the HAIPE IS v3 management and HAIPE device implementations are required to be compliant to the HAIPE IS version 3.0 common MIBs. Assurance of cross vendor interoperability may require additional effort. An example of a management application that supports HAIPE IS v3 is the L-3 Common HAIPE Manager.▼
There is a UK HAIPE variant that implements UKEO algorithms in place of US Suite A. Cassidian has entered the HAIPE market in the UK with its Ectocryp range. Ectocryp Blue is HAIPE version 3.0 compliant and provides a number of the HAIPE extensions as well as support for network [[quality of service]] (QoS). Harris has also entered the UK HAIPE market with the BID/2370 End Cryptographic Unit (ECU).<ref>[
▲A couple of new HAIPE devices will combine the functionality of a router and encryptor when HAIPE IS version 3.0 is approved. General Dynamics has completed its TACLANE version (KG-175R), which house both a red and a black Cisco router, and both ViaSat and L-3 Communications are coming out with a line of network encryptors at version 3.0 and above. Cisco is partnering with [[Harris Corporation]] to propose a solution called SWAT1<ref>[https://www.cisco.com/web/strategy/docs/gov/swat1_ds.pdf Cisco Harris SWAT1 Solution]</ref>
In addition to site encryptors HAIPE is also being inserted into client devices that provide both wired and wireless capabilities. Examples of these include
▲There is a UK HAIPE variant that implements UKEO algorithms in place of US Suite A. Cassidian has entered the HAIPE market in the UK with its Ectocryp range. Ectocryp Blue is HAIPE version 3.0 compliant and provides a number of the HAIPE extensions as well as support for network [[quality of service]] (QoS). Harris has also entered the UK HAIPE market with the BID/2370 End Cryptographic Unit (ECU).<ref>[http://harris.com/view_pressrelease.asp?act=lookup&pr_id=2601 Harris UK BID/2370 ECU]</ref>
== HAIPE managers ==
▲In addition to site encryptors HAIPE is also being inserted into client devices that provide both wired and wireless capabilities. Examples of these include L-3 Communication's KOV-26 Talon and Guardian SME-PED, and Harris Corporation's KIV-54 <ref>[http://rf.harris.com/media/secnet54_emod_tcm26-9219.pdf Harris KIV-54 (SECNET 54)]</ref> and PRC-117G <ref>[http://www.rfcomm.harris.com/117G/ Harris AN/PRC-117G]</ref> radio.
Viasat and General Dynamics Mission Systems both develop their own proprietary software for managing HAIPE devices, VINE and GEM One, respectively. The GEM One specifications list support for the Viasat HAIPEs, KG-250X and KG-250XS while the data sheet for VINE only lists supported Viasat Network Encryptors.<ref name="VINE Data Sheet">{{cite web |title=VINE Data Sheet |url=https://www.viasat.com/content/dam/us-site/government/documents/VINE_datasheet_040_web.pdf |website=Viasat.com |access-date=June 19, 2022}}</ref><ref name="GEM One GDMS">{{cite web |title=GEM One Encryptor Manager - General Dynamics Mission Systems |url=https://gdmissionsystems.com/products/encryption/encryptor-management/gem-one-encryptor-manager |website=gdmissionsystems.com |access-date=June 19, 2022 |language=en}}</ref>
▲Both the HAIPE
*[[NSA encryption systems]]▼
==
* [[ARPANET encryption devices]]
▲* [[NSA encryption systems]]
==
{{reflist}}
*[http://www.cnss.gov/Assets/pdf/CNSSP-19.pdf CNSS Policy #19 governing the use of HAIPE]▼
== External links ==
▲* [http://www.cnss.gov/Assets/pdf/CNSSP-19.pdf CNSS Policy #19 governing the use of HAIPE] {{Webarchive|url=https://web.archive.org/web/20080513042825/http://www.cnss.gov/Assets/pdf/CNSSP-19.pdf |date=May 13, 2008 }}
[[Category:Cryptographic protocols]]
| |||