CM111IP-C
COMMERCIAL IP CRYPTO
Product description
The CM111IP-C is a commercial encryption device designed for medium-speed IP data communications, in line with the operational and technical requirements of the professional market. It provides comprehensive communications protection for companies, service providers and institutions.
The Cipher implements security requirements related to confidentiality, authentication and integrity, ensured by a proprietary security protocol employing state-of-the-art cryptographic algorithms. In addition, it includes post-quantum cryptography algorithms that are resistant to attacks from future quantum computers.
The adoption of the latest generation of hardware and firmware solutions allows for a significant reduction in the size of the cryptographic apparatus compared to current architectures used to create cryptographic modules, while still maintaining high and consistent performance suitable for enterprise applications. The CM111IP-C is designed to be integrated into existing network architectures that include cybersecurity devices between the cryptographic side and the physical transport network. It is compatible with external routers, firewalls, and external IDS systems, enabling advanced networking capabilities.
Key features
Versatile and flexible to meet multiple applications in a heterogeneous distributed environment, suitable for securely connecting remote sites/facilities of business organisations
Implementation of Quantum Resistant algorithms
Support of new functionalities by incremental updates
Complemented by Crypto Management Application (CMAP) which performs key generation functions, using the entropy provided by internal TRNG, and CSPs, preparing the Tokens/CIKs for the network's ECUs
Dedicated off-line applications for key generation, network and crypto configuration generation, initialization, and management
Complemented by Key and Network Management System (KNMS), able to control secure networks of any size
Small form factor unit and medium throughput
Design and development of CM111IP-C crypto is the result of the collaboration and fully under control of Leonardo and Next Italian companies. Manufacturing is performed at Leonardo plants
Technical description
GENERAL
- Commercial IP encryptor
- IPv4 and dual stack IPv4 /IPv6 (future)
- Fully SW programmable and upgradable
- 400 Mbps secured (aggregated) throughput
- Small form factor unit
- Suitable for fixed and deployable applications
NETWORKING FEATURES
- IPv4 and IPv4 /IPv6 Dual-Stack (future)
- Secure Virtual Private Networks
- Support for “hot-failover” and “load balancing”features (future)
- Network Layer
- Encapsulated at level 3 on red side
- Encapsulate at Level 4 on black side
SECURITY SERVICES
- Encryption capabilities
Encrypt at Level 3 on red side
Encapsulate at Level 4 on black side
INTERFACES
- Cypher-Text (CT)
Ethernet 10/100/1000 bps (RJ45) - Plain,Text (PT)
Ethernet 10/100/1000 bps (RJ45) - Initialization/Comm. ports
USB 3.1 (2) - Management port
RS232 (out of band Management)
SECURITY PROTECTIONS
- Anti tampering functions
Tamper Evidence via security seals
Full security data erasing upon tampering attempt, even without power feeding - Crypto Ignition Key (CIK)
USB device enabling encryptor capabilities - Manual Rekeying
- Lithium Battery
3.6V, AA size or by KNMS
MANAGEMENT
- Local control
Status display (LED)
Dedicated application (through Serial Management port)
Role-based Access Control - Auto diagnostics
Power-on self-test, On-line BIT
POWER SUPPLY
- Supply Voltage
12 Vdc nominal (external 100-240 Vac power supply) - Power consumption
< 60 W
SIZE AND WEIGHT
- Case Size
75 x 220 x 180 mm (H x W x D) - Weight
<1.8 Kg - Color
Matt Black (FS 37038 i.a.w. FED-STD-595 (A)
ENVIRONMENTAL
- Operating Temperature
0 °C to +30 °C - Storage Temperature
-20 °C to +70 °C - Relative humidity
5% to 95% - Vibration
0.5 g (5-500 Hz random)
EMI/EMC
- Designed to operate in heavily co-located electronic systems
CE MARKING
- Conformant to the relevant EU directives
