Certificate 1622 - CEP10-R, CEP10 VSE and CEP10-C
intCertNum 1622
strVendorName Certes Networks, Inc.
strURL http://www.certesnetworks.com
strAddress1 300 Corporate Center Drive
strAddress2 Suite 140
strAddress3
strCity Pittsburgh
strStateProv PA
strPostalCode 15108
strCountry 15108
strContact Kevin Nigh
strEmail kevin.nigh@cipheroptics.com
strPhone 412-262-2571
strFax 919-865-0679
strContact2
strEmail2
strFax2
strPhone2
intCertNum 1622
strModuleName CEP10-R, CEP10 VSE and CEP10-C
strPartNumber Hardware Versions: [CEP10-R, PN 410-032-402, A], [CEP10 VSE, PN 410-032-402, A], [CEP10-C, PN 410-032-602, A] and [CEP10 VSE, PN 410-032-602, A];
Firmware Version: 1.6
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL http://www.certesnetworks.com/products/variable-encryptors.html
strModuleType Hardware
strValidationDate 10/24/2011
intOverallLevel 2
memIndividualLevelNotes -Cryptographic Module Specification: Level 3;-Roles, Services, and Authentication: Level 3;-Design Assurance: Level 3
strFIPSAlgorithms Triple-DES (Certs. #673, #1089 and #1090);
AES (Certs. #779, #1680 and #1681);
SHS (Certs. #781, #1466 and #1467);
HMAC (Certs. #426, #983 and #984);
RSA (Certs. #825 and #826);
DSA (Certs. #523 and #524);
RNG (Certs. #891 and #892)
strOtherAlgorithms MD5;
HMAC-MD5;
ARC2;
ARC4;
AES-XCBC-MAC-96 (non-compliant);
DES;
Blowfish;
AEAD;
EC Diffie-Hellman;
Diffie-Hellman (key agreement: key establishment methodology provides 97 bits of encryption strength;
non-compliant);
RSA (key wrapping;
key establishment methodology provides between 112 to 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength)
strConfiguration Multi-chip standalone
memModuleDescription The Certes Networks CEP encryptors are high performance, integrated encryption appliances that offers full line rate Ethernet Frame encryption for 10Mbps Ethernet transports. Housed in a tamper evident chassis, the Certes Networks CEP10-R and CEP10 VSE has two functional 10BaseT Ethernet ports used for traffic. Traffic on the CEP's local port is received from and transmitted to the trusted network in the clear, while traffic on the CEP's remote port has security processing applied to it. Security processing can be data confidentiality, data integrity and data authentication.
intModuleCount 1
memAdditionalNotes
strFirstValidtionDate 10/24/11 00:00:00
strLabName CGI
strValidationYear 2011