Model C

DarkStor Model C is the most advanced enterprise file-object encryptor available today with data rates up to 100 Gbps to protect data stored in a private/public data center or cloud service.

Our multi-performance Layer 4-7 application-aware encryptor securely encrypts and decrypts data between thousands of clients to their data storage site, providing both protection for data in-transit and data-at-rest (stored).

Designed with several high assurance features such as FAIL-SAFE to ensure reliable and secure operation.

Designed with Intel’s family of FPGAs, which offers high performance and protection from network and physical attacks.

Darkstor
Darkstor
Darkstor
Top Level Features
  • Multiple data rates: 10 Gbps (20 Gbps full-duplex), 40 Gbps (80 Gbps full-duplex) or 100 Gbps (200 Gbps full-duplex)
  • Support for 256 bit AES-GCM (Galois/Counter Mode) authenticated encryption
  • TCP/IP and TLS v1.2 100Gbs (full-duplex) in-line engines. Supports file-object systems: SMB/CIFS, NFS, S3
  • Supports more than 8000 simultaneous client connections at 3000 connections/second
  • Latency: 100 microsecond latency
  • Secure firmware upgradeable to future protocols and cryptographic standards
Certification

Planned FIPS-140-2, level-3

Ease of Use Setup and Maintenance
  • Remote management using SNMP v2 or v3 or browser-based management configurations
  • Key Manager support via KMIP (Key Management Interoperability Protocol), compatible with 3rd party external key manager products
  • Dual redundant hot-swappable power supplies
  • Hot-swappable fans banks
Applications
  • Secure off-site file-object storage in private/public data center or cloud provider
  • Support secure cloud computing
  • Migrate local storage to cloud
  • Business continuity/disaster recovery and backup
Physical

Dimensions (W x H x D) 19 x 3.5 x 20.1 in.

Mounting Industry standard 19 in. wide x 2U high x 24 to 31 in. deep, slide rails

Weight 14.7 lb

Power 300 Watts; 110 to 240 VAC; 50-60 Hz.

Redundant hot-swap power supplies

Battery External user replaceable battery, one “1/2AA” lithium cell

Network Interfaces

Separate plaintext data ports and encrypted ports

10 Gbps (SFP), 40 Gbps (QSFP), 100 Gbps (QSFP28) or 100 Gbps (CXP)

Remote Management Interface

HTTPS/SNMP Interface RJ-45 10/100/1000 Mbps

High Availability Sync interface RJ-45 Serial

Security

Algorithms: 256-bit AES/GCM, GMAC, SIGv4, TLS

Key Fill Interface DS-101 and rear panel RJ-45 key port

Crypto Ignition Key (CIK) for secure operation

Reliability and Maintenance

Other extensive power up and internal self test

Hot-swappable fan bank

Dual redundant hot-swappable AC power supplies

Environment

Operating Temperature -5° to 50° C

Storage Temperature -40° to 70° C

Humidity 5% to 95% non-condensing

EMI/EMC Telcordia GR-1089-CORE, ID 8, Radiated emission and FCC Class B, Consumer

Networking Features and Protocols

Security and Network Protocols TLS v1.2, TCP/IP, SMB/CIFS, NFS, S3, IPv4, IPv6

TLS 1.2 with the following cipher suites:

  • TLS_RSA_with_AES_128_GCM_SHA256
  • TLS_RSA_with_AES_256_GCM_SHA384
  • TLS_DHE_RSA_with_AES_128_GCM_SHA256
  • TLS_DHE_RSA_with_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_with_AES_128_GCM
  • SHA256 TLS_ECDHE_RSA_with_AES_256_GCM_SHA384

Networking Features Protects data at Layer 4-7 with TLS and file object encryption

Remote Management SNMP & HTTPS browser-based management