Model S

DarkLink Model S is the most advanced site-to-site MACsec encryptor available today with data rates up to 100 Gbps to protect vital data that is transmitted over an open network.

  • Multi-rate MACsec encryptor operates over 10/40/100 Gbps Ethernet Networks
  • Designed to Ethernet Security Specication (ESS) and IEEE Std 802.1AE MACsec standard
  • Designed with high assurance fail-safe features to ensure reliable and secure operation

DarkLink is designed with Intel’s family of FPGAs, which offers high performance and hardware protection from network and physical attacks.

Darklink
diagram
Top Level Features
  • Multiple Data rates: 10 Gbps (20 Gbps full duplex), 40 Gbps (80 Gbps full duplex), 100 Gbps (200 Gbps full duplex)
  • Back-to-back packet processing
  • Ethernet AES-GCM 256 bit with Galois Message Authentication (GMAC) per IEEE 802.1AEbn and ESS
  • Support for Extended Packet Numbering per IEEE 802.1AEbn (GCM-AES-XPN-256)
  • Latency: Less than 2 microseconds
  • Secure firmware upgradeable to future protocols and cryptographic standards
Certification

Planned FIPS-140-2, level 3

Ease of Use Setup and Maintenance
  • Remote management using SNMP v2 or v3 or browser-based management
  • Key manager support via KMIP (Key Management Interoperability Protocol), compatible with 3rd-party external key manager products
  • Dual redundant hot-swappable AC power supplies
  • Dual hot-swappable fans
Applications
  • Big data in-transit protection
  • Data center, government, or corporate site-to-site interconnectivity
  • Business continuity, disaster recovery, and backup
Network Interfaces

Data Interfaces
Separate clear data and encrypted data ports
10 Gbs (SFP+), 40 Gbs (QSFP), 100 Gbps (QSFP28) or 100 Gbps (CXP)

Remote Management Interface
HTTPS/SNMP v2 or v3 Interface RJ-45 10/100/1000 Mbps

High Availability
RJ-45 10/100/1000 Mbps sync interface

Security

Algorithms: AES-GCM 256-bit, MACsec Key Agreement (MKA)

Key Fill Interface DS-101 and rear panel RJ-45 keyport

Crypto Ignition Key (CIK) for secure operation

Replay protection based on the PN windowing MKA with pre-placed keys per MKA with Secturion key set-up:

  • Key storage, lookup, and expansion
  • Configurable key lookup for TX is based on Ethernet frame header (MAC addresses and VLAN)
  • Optional self key manager (i.e. no external key manager required)
Maintenance
  • Extensive power up and internal self-tests
  • Hot-swappable fan bank
  • Dual redundant hot-swappable supplies
Physical

Dimensions (W x H x D) 19 x 1.72 x 16.4 in.

Mounting Industry standard 19 in. wide x 1U High x 24 to 31 in. deep slide rails

Weight 11 lb

Power 100 Watts; 110 to 240 VAC; 50-60 Hz

Battery External user replaceable battery, one “1/2AA” lithium cell

Environment

Operating Temperature -5° to 50° C

Storage Temperature -40° to 70° C

Humidity 5% to 95% non-condensing

EMI/EMC Telcordia GR-1089-CORE, ID 8, Radiated emission and FCC Class B, Consumer