Datacryptor™ 64F Frame Relay Encryption Device

Get Acrobat Reader

Technical Specifications

Frame Relay Encryption Device Provides Secure Communications Over Public Networks
As migration to frame relay continues to expand, more and more people are discovering the advantages of frame relay network services - less expense, fewer networking delays, and higher throughput. However, since frame relay is a public service, information transmitted over frame relay networks is vulnerable to disclosure and attack. The Racal Datacryptor^™ 64F (DC 64F) frame relay encryption device is designed to provide secure communications over frame relay networks on an end-to-end basis - effectively creating a virtual private network within the public network.

End-to-end encryption protects your data from source to destination by encrypting prior to transmission and decrypting at final destination. Only data fields within frames are encrypted, while address and control information remain "in the clear" for routing through the frame relay network. In a typical installation, the DC 64F connects between a frame relay DTE device such the Racal FastFrame^™ 200 FRAD (Frame Relay Access Device) or a frame relay router, and a DCE at end points of the network.

Supports 992 PVCs at Speeds up to 128 Kbps
The DC 64F supports a maximum of 992 PVCs (Permanent Virtual Circuits) at speeds up to 128 Kbps, allowing your network to expand without constant device upgrades or replacement. The DC 64F protects each PVC with a unique crypto-key for optimum security. Frame sizes up to 4096 bytes are supported for additional flexibility.

Handles Encrypted and Unencrypted PVCs Simultaneously
The DC 64F can be configured to transmit either encrypted (secure) or unencrypted (clear) data on an individual PVC basis, allowing you to communicate with both secured and unsecured sites. When a connection is made to an unsecured site (no DC 64F present) data is transmitted unencrypted. Alternatively, when a connection is made to a site equipped with a DC 64F, data is transmitted encrypted.

Secure Key Management System
Ensuring the highest level of security possible, the DC 64F performs key management in accordance with the American National Standards Institute (ANSI) X9.17 Key Management Standard and National Institute of Standards and Technology (NIST) FIPS 140-1 for use in government and commercial applications.

The DC 64F is compatible with the Racal Datacryptor Key Management Center, which provides centralized key management and control for your entire network of encryption devices. When used with the Key Center, a 3-key hierarchy is used for key management. When used without the Key Center, a 2-key hierarchy is used.

The DC 64F can be configured so that key changes are performed on an automatic, pre-timed basis without operator intervention. Cryptographic service messages transmitted between encryptors or from the Key Center are authenticated using a secure protocol ensuring service message integrity.

SNMP Management
The DC 64F supports industry-standard SNMP (Simple Network Management Protocol), enabling you to monitor unit status using any SNMP-based management application. With an SNMP manager at a central location, you can communicate inband through the frame relay network with all DC 64F units. The DC 64F responds to SNMP Gets, providing information on unit identity, configuration, connections, and current status. It also issues Traps to alert you to network events and alarms.

DES Encryption
The DC 64F uses the Data Encryption Standard (DES) algorithm to encrypt and decrypt the data portion of each frame. Data can be encrypted in the 8-bit cipher feedback mode for automatic resynchronization without operator intervention, at speeds up to 128 Kbps.

PC Connection/Key Center Port
The DC 64F rear panel includes a port for connection to either a PC with a terminal emulator (or VT-type terminal) or the Key Center. Connecting to a PC/terminal allows you to configure the unit, view up to 100 logged events, verify unit status, etc.

Connecting to the Key Center allows one or more designated DC 64F units to communicate with the Key Center and forward commands to other DC 64F units within the frame relay network. These commands include key checks and changes, mode checks and changes, diagnostic testing, etc.

Front Panel Programmability
The front panel has an LCD screen display and nine soft-touch controls, allowing full and easy configuration of the unit. By simply pressing a few buttons and viewing the LCD, you can control key management, unit configuration, diagnostic testing, and operating mode selection. A 32-character display provides valuable information on unit status including operating mode, active alarms or advisories, and the date and time of important unit events.

Diagnostic Testing
Diagnostic testing helps maintain trouble-free operation. DC 64F tests can be initiated in several ways: automatically on power-up, from the front panel, or in response to Key Center commands. Several tests are available: ROM/RAM, S-box, key parity, cipher feedback, checkword, and memory test.

Strap Selectable Interfaces
For application flexibility, the DC 64F is equipped with RS-232, V.35, and V.11 electrical interfaces. An internal strap allows you to easily change the interface to satisfy your application. The unit is equipped with standard DB-25 connectors for both DTE and DCE connections.

Alarm Reporting
The DC 64F alerts you to unit failures by issuing a wide variety of alarms. An alarm causes the front panel LED to light, sends an alarm message to the LCD, and activates the alarm relay contact on the rear panel. The alarm relay allows connection of an external alarm indication device for local alerting, or remote alarm reporting to a Racal Key Center or CMS™ network management system.

Battery-Backed Memory
For added security, the DC 64F's internal memory is protected by Lithium battery backup. This feature saves the current keys, system parameters, and time-of-day clock if the unit is unplugged from the power source or if a power failure occurs. Keys and system parameters are retained in memory for up to 10 years.

Physical Security
Housed in a wraparound metal enclosure, the DC 64F is designed to restrict unauthorized internal access. An anti-tamper switch activates if an attempt is made to remove the cover. Upon activation, all stored keys are automatically erased and operating parameters are reset to their default values.

Two pick-resistant locks are located on the DC 64F front panel. Setting the locks in the lockout position prevents unauthorized personnel from: reconfiguring operating parameters, loading or changing keys, checking current keys in use, changing operating modes, testing the unit, viewing log displays, and viewing automatic key change parameter settings.

An optional desktop assembly allows secure mounting of the DC 64F to a flat surface such as a table or shelf, preventing unauthorized personnel from removing the unit from its designated location.

Datacryptor™ 64F Frame Relay Encryption Device
Technical Specifications

Our policy of continuous development may cause the information and specifications contained herein to change without notice.

Racal, Racal-Datacom, Datacryptor, FastFrame, and CMS are trademarks of Racal Electronics Plc. All other logos and product names are trademarks or registered trademarks of their respective companies.

©1996 Racal-Datacom, Inc. All rights reserved. Printed in U.S.A. 3C1462 - 10/96

Last Modified: 10 Dec 97