High Assurance Internet Protocol Encryptor: Difference between revisions

Revision as of 21:20, 15 February 2020

Revision as of 01:50, 28 February 2020

Line 8:

Examples of HAIPE devices include:

* L-3L3Harris CommunicationsTechnologies' Encryption Products <ref>[https://www2.l3t.com/cs-east/what-we-do/products/encryption-products_red-eagle.htm L-3 Communication Encryption Products]</ref>

** KG-245X 10Gbit/s (HAIPE IS v3.01.2 and Foreign Interoperable),

** KG-245A fully tactical 1 Gbit/s (HAIPE IS v3.1.2 and Foreign Interoperable)

** RedEagle

Line 21:

*Airbus Defence & Space ECTOCRYP Transparent Cryptography <ref>{{Cite web |url=http://www.cassidian.com/pl/web/guest/1307 |title=Ectocrypt Blue by Cassidian, an EADS Company |access-date=2013-11-18 |archive-url=https://web.archive.org/web/20131107061236/http://www.cassidian.com/pl/web/guest/1307 |archive-date=2013-11-07 |url-status=dead }}</ref><ref>{{cite web|url=http://www.cassidian.com/en_US/web/guest/cassidian-unveils-ectocryp-yellow |archive-url=https://archive.is/20131118073910/http://www.cassidian.com/en_US/web/guest/cassidian-unveils-ectocryp-yellow |url-status=dead |archive-date=2013-11-18 |title=CASSIDIAN unveils ECTOCRYP YELLOW |date=September 2013 }}</ref>

Three of these devices are compliant to the HAIPE IS v3.0.2 specification while the remaining devices use the HAIPE IS version 1.3.5, which has a couple of notable limitations: nolimited support for [[routing protocols]] or open [[network management]].

A HAIPE is an IP encryption device, looking up the destination IP address of a [[Network packet|packet]] in its internal Security Association Database (SAD) and picking the encrypted tunnel based on the appropriate entry. For new communications, HAIPEs use the internal Security Policy Database (SPD) to set up new tunnels with the appropriate algorithms and settings. ByDue notto supportinglack of support for modern commercial routing protocols the HAIPEs often must be preprogrammed with [[static routing|static routes]] and cannot adjust to changing network topology. While manufacturers support centralized management of their devices through proprietary software, the current devices offer no management functionality through open protocols or standards.

Both the HAIPE IS v3 management and HAIPE device implementations are required to be compliant to the HAIPE IS version 3.0 common MIBs. Assurance of cross vendor interoperability may require additional effort. An example of a management application that supports HAIPE IS v3 is the L-3L3Harris Common HAIPE Manager (which only operates with L3Harris products).

A couple of new HAIPE devices will combine the functionality of a router and encryptor when HAIPE IS version 3.0 is approved. General Dynamics has completed its TACLANE version (KG-175R), which house both a red and a black Cisco router, and both ViaSat and L-3 Communications are coming out with a line of network encryptors at version 3.0 and above. Cisco is partnering with [[Harris Corporation]] to propose a solution called SWAT1<ref>[https://www.cisco.com/web/strategy/docs/gov/swat1_ds.pdf Cisco Harris SWAT1 Solution]</ref>

Line 31:

There is a UK HAIPE variant that implements UKEO algorithms in place of US Suite A. Cassidian has entered the HAIPE market in the UK with its Ectocryp range. Ectocryp Blue is HAIPE version 3.0 compliant and provides a number of the HAIPE extensions as well as support for network [[quality of service]] (QoS). Harris has also entered the UK HAIPE market with the BID/2370 End Cryptographic Unit (ECU).<ref>[https://www.harris.com/press-releases/2008/12/next-generation-bid-2370-device-developed-under-uk-ministry-of-defence-chimp Harris UK BID/2370 ECU]</ref>

In addition to site encryptors HAIPE is also being inserted into client devices that provide both wired and wireless capabilities. Examples of these include L-3L3Harris CommunicationTechnologies's KOV-26 Talon and Guardian SMEKOV-PED26B Talon2, and Harris Corporation's KIV-54 <ref>{{Cite web |url=http://rf.harris.com/media/secnet54_emod_tcm26-9219.pdf |title=Harris KIV-54 (SECNET 54) |access-date=2013-11-18 |archive-url=https://web.archive.org/web/20131030001308/http://rf.harris.com/media/SecNet54_EMOD_tcm26-9219.pdf |archive-date=2013-10-30 |url-status=dead }}</ref> and PRC-117G <ref>{{Cite web |url=http://www.rfcomm.harris.com/117G/ |title=Harris AN/PRC-117G |access-date=2008-10-05 |archive-url=https://web.archive.org/web/20080930205542/http://www.rfcomm.harris.com/117G/ |archive-date=2008-09-30 |url-status=dead }}</ref> radio.

==See also==