Cisco 3200 Series Spezifikationen PDF herunterladen (Seite 41)

2-5

Cisco 3200 Series Router Hardware Reference

OL-5816-10

Chapter 2 Cisco 3270 Rugged Router Card

The EUs are:

• Public Key Execution Unit (PKEU) supporting:

–

RSA and Diffie-Hellman

–

Programmable field size up to 2048 bits

–

Elliptical curve cryptography

• Data Encryption Standard Execution Unit (DEU)

–

Data Encryption Standard (DES)

–

Triple Data Encryption Standard (3DES)

–

Two-key (K1, K2) or three-key (K1, K2, K3)

–

Ethernet Bundling Controller (EBC) and Cipher Block Chaining (CBC) modes for both DES

and 3DES

• Advanced Encryption Standard Unit (AESU)

–

Implements the Rinjdael symmetric key cipher

–

Key lengths of 128, 192, and 256 bits

–

ECB, CBC, CCM, and AES Counter Mode (a block cipher that encrypts 128-bit blocks of data

at a time with a 128-bit encryption key)

• ARC Four execution unit (AFEU)

–

A stream cipher compatible with the RC4 algorithm

–

40- to 128-bit programmable key

• Message Digest Execution Unit (MDEU)

–

Secure Hash Algorithm (SHA) with a 160-bit or 256-bit message digest

–

Message Digest 5 (MD5) with a 128-bit message digest

–

Hash-based Message Authentication Code (HMAC) with either algorithm

• Random Number Generator (RNG)

• Four crypto channels, each supporting multi command descriptor chains

–

Static or dynamic assignment of crypto-execution units through an integrated controller

–

Buffer size of 256 bytes for each EU, with flow control for large data sizes

Caution Zeroization is a feature that erases all potentially sensitive information from the router. It is disabled by

default on the router. When Zeroization is not configured on the router, the AUX port functions as a

modem port or a terminal port.

Zeroization is configured through the command-line interface (CLI), but it cannot be activated through

the CLI. Zeroization is activated by actuating a custom switch connected to the GPIO pins or an actuator

(such as a push button) that must be attached to the AUX port.

There is no way for the router to reliably determine whether a device attached to the AUX port is an

actuator. Therefore, any device attached to the AUX port could potentially trigger declassification. When

declassification is enabled through the CLI, we recommend that you do not use the AUX port for any

function other than declassification.

1 2 ... 36 37 38 39 40 41 42 43 44 45 46 ... 93 94

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco 3200 Series Spezifikationen Seite 41

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung Cisco 3200 Series