Xiphra.com

Xiphra Core Encryptor

EVALUATE PRODUCT

ABOUT Xiphra Core Encryptor

Most powerful Layer 3 encryptor there is where no compromise on security was allowed.

Powerful Security.

More than 10 Gbit/s of throughput. Latencies lower than 5 μs. Securing with state-of-the-art encryption and authentication algorithms.

These capabilities make Xiphra Core Encryptor quintessential crypto solution for headquarters and data centres.

10 Gbit/s	5 µs	24 W	3 kg
of throughput	latency at 80 bytes packet size	of power consumption	for easy handling

Easy to Manage.

Supporting 1500 concurrent encrypted connections to allow seamlessly secure communication of even most demanding organisations.

Xiphra Management System (XMS) further facilitates management of large encryption networks. It eliminates the ordering, transportation, storage and handling of sensitive crypto key material; grows with evolution of your service and enables you to rekey your network in matter of minutes.

Highest Levels of Protection.

Protected and user-friendly.

Set up and upgrade your Xiphra Core Encryptor in few steps using Xiphra USB flash drive.

Temper-evident labels, customer temper-proof screws (licensed only to us) along with number of other mechanisms prevent unauthorized intrusions.

LED lights indicate operational states of your device, power status and network activity status.

To have Xiphra Core Encryptor protected from unexpected activations or reconfigurations, we placed RESET button on the front panel.

In case of urgency, pressing ERASE button will erase all cryptographic keys and parameters on Xiphra Core Encryptor.

Monitor progress in configuring your device. Enter PIN. Check status of your device.

Communicate with Xiphra Core Encryptor using selector knob.

Licensing.

Each Xiphra Encryptor provides different licensing options to meet your needs.

Pro Option

Device license
1 Gbit/s
250 Tunnels

Including:
Xiphra USB
Power supply cabling
M6 screws

Enterprise Option

Device license
2.5 Gbit/s
500 Tunnels

Including:
Xiphra USB
Power supply cabling
M6 screws

Ultimate Option

Device license
10 Gbit/s
1500 Tunnels

Including:
Xiphra USB
Power supply cabling
M6 screws

SPECIFICATIONS

Functional Specifications.

Network Traffic Protection

ESP tunnel mode
Firewalls all non-approved traffic arriving from both public and private networks
CNSA and NSA Suite B algorithms
- Authenticated symmetric encryption AES-GCM-256 with 128 bit ICV
- Elliptic Curve Diffie-Hellman (ECDH) ephemeral key agreement with the NIST P-384 and P-521 elliptic curves
- Elliptic Curve Digital Signature Algorithm (ECDSA) with the NIST P-384 and P-521 elliptic curves
- Message Digests with SHA-384 and SHA-512
Special Algorithm Options (please contact us for more information)
- Authenticated Encryption with Keccak spongeWrap in Duplex construction
- Authenticated Encryption with Keyak v1 in DuplexWrap Mode
- Authenticated Encryption with Keyak v2 in Motorist Mode
- Quantum Resistant public key cryptography
- ECDH with E-521 and Curve25519
- Message Digests with SHA-3

Additional Security Features

CC EAL4+ certified random number generator
Device pre-boot authentication
Physical security mechanisms:
- Ruggedized enclosure and screws
- Tamper-evident labels over all detachable parts of the chassis
- Tamper-reactive mechanisms inside of encryptor

Physical and Environmental Specifications.

Dimensions
1U Rack Mount

Weight
3 kg

Operating voltage
100 – 240 VAC +/- 10%

Power (max.)
24 W

Operating temperature
0° to 55° C

Operating humidity
30% - 95% RH (non-condensing)