RE: FORTEZZA for Cisco router? [7:73114]

2003-07-29 Thread Howard C. Berkowitz
>  >By the way, FORTEZZA is used for more that "sensitive but unclassified"
>>traffic.  That's just one application.  What you're probably looking for
>is
>>a product that falls in the "NSA Type 2" category.  We can discuss more
>>offline if you want to...
>
>Out of curiosity, what is currently used for classified traffic?
>

A whole range of devices, usually a KG-something. There really is no 
single solution, given there are a very wide range of requirements. 
On the one hand, you might have a device that an artillery observer 
uses to send small messages with target coordinates, which become 
irrelevant in 5 minutes or whatever it takes to blow the target away. 
High-resolution imagery streams, however, need multimegabit (or 
better) throughput.  Spy reports are small, but need to be 
unbreakable or at least secure for decades -- go to the NSA 
historical page, read about VENONA, and find out why.

Apropos of Cisco, you might see an occasional reference to BLACKER 
mode. That's a now obsolete crypto device that was going to be the 
greatest thing since sliced bread, handling traffic at all security 
levels. Unfortunately, it did so much processing that it only had 64 
Kbps throughput, when the single-level devices of the time could do 
T1 or better -- and more cheaply.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73201&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: FORTEZZA for Cisco router? [7:73114]

2003-07-29 Thread Howard C. Berkowitz
>  >By the way, FORTEZZA is used for more that "sensitive but unclassified"
>>traffic.  That's just one application.  What you're probably looking for
>is
>>a product that falls in the "NSA Type 2" category.  We can discuss more
>>offline if you want to...
>
>Out of curiosity, what is currently used for classified traffic?
>

A whole range of devices, usually a KG-something. There really is no 
single solution, given there are a very wide range of requirements. 
On the one hand, you might have a device that an artillery observer 
uses to send small messages with target coordinates, which become 
irrelevant in 5 minutes or whatever it takes to blow the target away. 
High-resolution imagery streams, however, need multimegabit (or 
better) throughput.  Spy reports are small, but need to be 
unbreakable or at least secure for decades -- go to the NSA 
historical page, read about VENONA, and find out why.

Apropos of Cisco, you might see an occasional reference to BLACKER 
mode. That's a now obsolete crypto device that was going to be the 
greatest thing since sliced bread, handling traffic at all security 
levels. Unfortunately, it did so much processing that it only had 64 
Kbps throughput, when the single-level devices of the time could do 
T1 or better -- and more cheaply.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73188&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: FORTEZZA for Cisco router? [7:73114]

2003-07-29 Thread John Neiberger
>By the way, FORTEZZA is used for more that "sensitive but unclassified"
>traffic.  That's just one application.  What you're probably looking for
is
>a product that falls in the "NSA Type 2" category.  We can discuss more
>offline if you want to...

Out of curiosity, what is currently used for classified traffic?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73183&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: FORTEZZA for Cisco router? [7:73114]

2003-07-29 Thread s vermill
Howard C. Berkowitz wrote:
> 
> Does anyone know if there's a FORTEZZA encryption product
> available,
> presumably third-party, for Cisco routers?  It's a NSA-approved 
> chipset, usually on PC card, for government "sensitive but 
> unclassified" traffic.  CCO search doesn't give any hits.
> 
> 

Can you be a bit more specific?  I'm aware of FORTEZZA cards that are used
to encrypt data to/from a PC's async interface.  But if used on a router's
async interface, the header would be garbled.  That would probably be OK on
a p-t-p connection, but obviously not on the Internet.  Or are you talking
about password encryption, etc?  There are FORTEZZA cards in PC Card format
(check out www.mykotronx.com).  But I don't think IOS supports anything like
that.

By the way, FORTEZZA is used for more that "sensitive but unclassified"
traffic.  That's just one application.  What you're probably looking for is
a product that falls in the "NSA Type 2" category.  We can discuss more
offline if you want to...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73178&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: FORTEZZA for Cisco router? [7:73114]

2003-07-28 Thread David Vital
Egad  I hope the fortezza has gotten easier to use.  When I was in the Army
I was trained on that card.  I hated it.  That's been several years but I
shuddered when I read the name.  I thought the military had rerouted and
gone with a software based client solution to cover encryption anyway.

David


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73125&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: FORTEZZA for Cisco router? [7:73114]

2003-07-28 Thread John Neiberger
 Howard C. Berkowitz 7/28/03 11:37:44 AM >>>
>Does anyone know if there's a FORTEZZA encryption product available, 
>presumably third-party, for Cisco routers?  It's a NSA-approved 
>chipset, usually on PC card, for government "sensitive but 
>unclassified" traffic.  CCO search doesn't give any hits.

My first thought was a company called SafeNet, www.safenet-inc.com, but it
appears that they don't have anything that does Fortezza. I then ran across
this product:

http://niap.nist.gov/cc-scheme/TTAP-CC-0001.html 

Is that the sort of thing you're looking for?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73118&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


FORTEZZA for Cisco router? [7:73114]

2003-07-28 Thread Howard C. Berkowitz
Does anyone know if there's a FORTEZZA encryption product available, 
presumably third-party, for Cisco routers?  It's a NSA-approved 
chipset, usually on PC card, for government "sensitive but 
unclassified" traffic.  CCO search doesn't give any hits.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73114&t=73114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]