Working

EthCryptor supports two ports,plain and cipher.Data to be encrypted is fed to the plain port and encrypted data is available at the Cipher port. The encrypted data is now secured to be transmitted to any network and domain. This information of encrypted data can only be decrypted by Dexcel’s Ethcryptor at the other end which makes the whole cycle of communication with Encryption and Decryption safe and secure. Decryption of the data extraction is done in the same way as of encryption by feeding the data into the cipher port and output from the plain port.

EthCryptor also supports a special feature that would alert if there is any intrusion or ping to the plain or cipher port from any non configured sources (ip address).

The filtering algorithm implemented in the product makes sure that only TCP/UDP data gets encrypted/decrypted. Any other IP packets which are used for discovery of the network are simply sent from plain to cipher and vice-versa as pass through like a pipe. With this feature only the packets which contain data or configured IP information are encrypted and the rest are just passed as it is.

EthCryptor supports two encryption modes: Transport and Tunnel. Transport mode encrypts only the data portion (payload) of each Ethernet packet, but leaves the ethernet header untouched. The more secure Tunnel mode encrypts both the header and the payload.

Ethcryptor is designed to support multiple encryption standard algorithms like DES, 3-DES, AES. It is also designed to support custom algorithms which can be implemented either in the software using C/C++ language or in the hardware using VHDL/Verilog

Software and Hardware logic works together to bring Ethcryptor in action. Ethcryptor’s hardware can be designed in multiple variants like ASIC, FPGA or ASIC + FPGA units.

1. ASIC only In this version, encryption engine is designed in the software typically written in C language.

2. FPGA: In this version, encryption engine is designed in VHDL/Verilog targeted for a FPGA.These designs are
implemented using a soft processor. In this case the soft processor and the encryption engine both sit on the same FPGA.

3. ASIC + FPGA: In this version encryption engine sits on a separate FPGA while the processor is part of the ASIC.

Features & Technical Specifications

Network Interface

• 3 - 10/100/1000 BaseT Full/Half Duplex Ethernet ports (Plain, Cipher & Console)
• Additional Peripherals supported on request.

Network Protocols Support

• ICMP,TCP/IP, UDP & Messaging protocols

Network Flexibility

• Works with any network and is transparent with domain.
• Works with Routers and Switches
• Verified and Validated in VSAT environment
• Compatible with TCP/IP Accelerators
• Compatible with Switches and Routers
• Can be used for securing communication like
  • Host to Host
  • Host to Network
  • Network to Network
  • Network to Host

Application Support

• Verified and Supported in applications like DHCP/ DNS/ FTP/ HTTP/ IMAP4/ IRC/ NNTP/ XMPP/ POP3/ RTP/ SIP/ SMTP/ SNMP/ SSH/ TELNET/ RPC/ RTCP/ RTSP/ TLS (and SSL)

Management

• Programmable destination IPs and Ports
• One USB/Serial Port for Filter configuration and maintenance (Password Protected)
• SNMP support (MIB I, MIB II) with configured traps and Filters
• Remote configuration & monitoring

Utilities

• EthCryptor has an Auto Upgrade Utility which upgrades software of the system without disturbing the operations
• Support Power On Self Test

Safety Regulations

• EMI/EMC safe

Power and cabinet Dimensions

• 5 VDC, 2.0A.
• Screw Locking Connector
• Tamper proof casing
• Universal Adapter 100/240 VAC 50/60 Hz
• Optional -48V 0.25 Amp
• Hot Standby
• Dimensions: 9" (L) x 7.3” (W) x 1.50” (H)
• Available in Boxed and Non Boxed configurations
• Both Commercial and Industrial grade version available
  

Network Deployment

• Easy Deployment without any complicated installation procedures