CN Series Ethernet Encryptors
CN Series Ethernet Encryptors, from Senetas Corporation Ltd, distributed by Gemalto NV (SafeNet), holds FIPS 140-2 certificate #2794 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 2794 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Senetas Corporation Ltd, distributed by Gemalto NV (SafeNet) · website |
| Hardware versions | Senetas Corp. Ltd. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN4000 Series: A4010B (DC), A4020B (DC); Senetas Corp. Ltd. & SafeNet Inc. CN6010 Series: A6010B (AC), A6011B (DC) and A6012B (AC/DC) |
| Firmware versions | 2.7.1 and 2.7.2 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The CN4010, CN4020 and CN6010 are high-speed hardware encryption modules that secure data over twisted-pair Ethernet and optical networks. The modules support data rates to 1Gb/s and 100Mb/s and 10Mb/s modes. The CN6010 is also equipped with pluggable SFPs to support a variety of optical network interfaces. Data privacy is provided by FIPS approved AES CFB and CTR algorithms and GCM for applications that demand authentication. Additional transmission security is provided via TRANSEC (Traffic Flow Security) which can be used to remove patterns in network traffic and prevent traffic analysis.
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3977, 4003, 4004, 4005 |
| CVL | 807 |
| DRBG | 1170 |
| ECDSA | 876 |
| HMAC | 2595 |
| KAS | 81 |
| RSA | 2039 |
| SHS | 3282 |
| Triple-DES | 2182 |
Other algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-11-15 | Initial | DXC Technology |
| 2017-06-02 | Update | DXC Technology |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-11-15, 2017-06-02