CN Series Ethernet Encryptors
CN Series Ethernet Encryptors, from Senetas Corporation Ltd. and SafeNet Inc., holds FIPS 140-2 certificate #2557 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 2557 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Senetas Corporation Ltd. and SafeNet Inc. · website |
| Hardware versions | Senetas Corp. Ltd. CN4010 Series: A4010B (DC); Senetas Corp. Ltd. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN4010 Series: A4010B (DC); Senetas Corp. Ltd. & SafeNet Inc. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC) |
| Firmware versions | 2.6.1 and 2.6.2 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The CN4010 and CN6010 are high-speed hardware encryption modules that secure data over twisted-pair Ethernet and optical networks. The modules support data rates to 1Gb/s and 100Mb/s and 10Mb/s modes. The CN6010 is additionally equipped with pluggable SFPs to support a variety of optical network interfaces. Data privacy is provided by FIPS approved AES CFB and CTR algorithms as well as GCM for applications that demand authentication. Additional transmission security is provided via TRANSEC capability which can be used to remove patterns in network traffic and prevent traffic analysis.
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3335, 3342, 3343 |
| CVL | 489 |
| DRBG | 777 |
| ECDSA | 659 |
| HMAC | 2126 |
| KAS | 56 |
| RSA | 1725 |
| SHS | 2770 |
| Triple-DES | 1905 |
Other algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-02-11 | Initial | DXC Technology |
| 2016-04-11 | Update | DXC Technology |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-02-11, 2016-04-11