{"product_id":11485,"v_id":11485,"product_name":"Senetas Distributed by Thales CN Series Encryptors 5.5.0","certification_status":"Certified","certification_date":"2024-12-31T00:00:00Z","tech_type":"Network Device","vendor_id":{"name":"Senetas Corporation Ltd, Distributed by Thales SA (SafeNet)","website":"www.senetas.com"},"vendor_poc":"John Weston","vendor_phone":"+61 3 9868 4555","vendor_email":"john.weston@senetas.com","assigned_lab":{"cctl_name":"Lightship Security USA, Inc."},"product_description":"

The Security Target (ST) defines the Senetas Distributed by Thales CN Series Encryptors 5.5.0 Target of Evaluation (TOE) for the purposes of Common Criteria (CC) evaluation.
The TOE is a high-speed, standards-based encryptor designed to secure voice, data and video information transmitted over Ethernet networks. The TOE also provide access control facilities using access rules for each defined Ethernet connection.

\r\n

 

\r\n

 

","evaluation_configuration":"

 

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n

Model

\r\n		\r\n

CPU & ASIC

\r\n		\r\n

Hardware

\r\n		\r\n

Power

\r\n		\r\n

Protocol / FPGA Bitstream

\r\n		\r\n

AES Modes

\r\n		\r\n

I/F

\r\n		\r\n

LCD/ Keypad

\r\n
\r\n

CN4010

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A4010B

\r\n		\r\n

DC (Plug Pack)

\r\n		\r\n

1G Ethernet

\r\n		\r\n

CTR

\r\n

 

\r\n		\r\n

RJ45

\r\n		\r\n

No

\r\n
\r\n

1G Ethernet TIM

\r\n
\r\n

CN4020

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A4020B

\r\n		\r\n

DC (Plug Pack)

\r\n		\r\n

1G Ethernet

\r\n		\r\n

SFP

\r\n		\r\n

No

\r\n
\r\n

1G Ethernet TIM

\r\n
\r\n

CN6010

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A6010B

\r\n		\r\n

AC/AC Dual

\r\n		\r\n

1G Ethernet

\r\n		\r\n

RJ45 SFP

\r\n		\r\n

Yes

\r\n
\r\n

A6011B

\r\n		\r\n

DC/DC Dual

\r\n		\r\n

1G Ethernet TIM

\r\n
\r\n

A6012B

\r\n		\r\n

AC/DC Dual

\r\n
\r\n

CN6110

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A6110B

\r\n		\r\n

AC/AC Dual

\r\n		\r\n

1G Ethernet

\r\n		\r\n

RJ45 SFP+

\r\n		\r\n

Yes

\r\n
\r\n

A6111B

\r\n		\r\n

DC/DC Dual

\r\n		\r\n

1G Ethernet TIM

\r\n
\r\n

A6112B

\r\n		\r\n

AC/DC Dual

\r\n		\r\n

10G Ethernet

\r\n
\r\n

10G Ethernet TIM

\r\n
\r\n

CN6140

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A6140B

\r\n

 

\r\n		\r\n

AC/AC Dual

\r\n

 

\r\n		\r\n

1Gx1 Ethernet Single Port

\r\n

1Gx4 Ethernet Multi Port

\r\n		\r\n

SFP+

\r\n		\r\n

Yes

\r\n
\r\n

A6141B

\r\n		\r\n

DC/DC Dual

\r\n		\r\n

1Gx1 Ethernet TIM Single Port

\r\n

1Gx4 Ethernet TIM
Multi Port

\r\n
\r\n

10Gx1 Ethernet Single Port

\r\n

10Gx2 Ethernet 
Multi Port

\r\n
\r\n

A6142B

\r\n		\r\n

AC/DC Dual

\r\n		\r\n

10Gx1 Ethernet TIM Single Port

\r\n

10Gx4 Ethernet TIM Multi Port

\r\n
\r\n

10Gx4 Ethernet
Multi Port

\r\n
\r\n

CN9120

\r\n		\r\n

ARM Cortex A9

\r\n		\r\n

A9120B

\r\n		\r\n

AC/AC Dual

\r\n		\r\n

100G Ethernet

\r\n		\r\n

QSFP28

\r\n		\r\n

Yes

\r\n
\r\n

A9121B

\r\n		\r\n

DC/DC Dual

\r\n
\r\n

A9122B

\r\n		\r\n

AC/DC Dual

\r\n
\r\n

 

","security_evaluation_summary":"

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Senetas Distributed by Thales CN Series Encryptors 5.5.0 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Rev. 5. The product, when configured as identified in the Senetas Distributed by Thales CN4000/CN6000/CN9000 Series Ethernet Encryptors Firmware Version 5.5.0 Operational User Guidance (AGD_OPE.1), v1.1, satisfies all of the security functional requirements stated in the Senetas Distributed by Thales CN Series Encryptors 5.5.0 Security Target, v1.7. The project underwent CCEVS Validator review. The evaluation was completed in December 2024. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.

","environmental_strengths":"
    \r\n
  1. The TOE provides the following security functions:\r\n
      \r\n
    1. Trusted Path/Channels. The TOE protects the integrity and confidentiality of communications using cryptographic algorithms as described in Table 4 of the ST.
      2. \r\n
    2. Security Management. The TOE enables secure management of its security functions, including:\r\n
        \r\n
      1. Administrator authentication with passwords
        2. \r\n
      2. Configurable password policies
        3. \r\n
      3. Role Based Access Control
        4. \r\n
      4. Access banners
        5. \r\n
      5. Management of critical security functions and data
        6. \r\n
      6. Protection of cryptographic keys and passwords
        7. \r\n
      \r\n
      3. \r\n
    3. Protection of the TSF. The TOE performs a suite of self-tests to ensure the correct operation and enforcement of its security functions. The TOE performs diagnostic self-tests and cryptographic module self-tests during start-up and generates audit records to record a failure. Self-tests comply with the FIPS 140-2 requirements for self-testing.
      4. \r\n
    4. Identification and Authentication. The TOE ensures that all users must be authenticated before accessing its functions and data. The TOE uses public keys for authentication for SSH.
      5. \r\n
    5. TOE Access. TOE can be accessed directly via serial connection or remotely via SSH connection. When a user account has sequentially failed authentication the configured number of times, the account will not be locked.
      6. \r\n
    6. Security Audit. The TOE generates audit records of user and administrator actions. The TOE includes the user identity in audit events resulting from actions of identified users. The Security Administrator can configure the TOE to send logs in real-time to a syslog server via SSH.
      7. \r\n
    7. Cryptographic Support The TOE implements a cryptographic module.  The cryptographic module has the ability to generate, destroy cryptographic keys, authenticate keys, perform key exchanges in protected communications and validate signatures in image upgrades. Cryptographic functions are primarily used with the SSH protocol. Relevant Cryptographic Algorithm Validation Program (CAVP) certificates are shown in Table 4 of the ST.
      8. \r\n
    \r\n
    2. \r\n
","features":[{"id":750,"feature_name":"Asymmetric Key Generation"},{"id":746,"feature_name":"Auditing"},{"id":754,"feature_name":"Cryptographic Hashing"},{"id":751,"feature_name":"Cryptographic Key Establishment"},{"id":753,"feature_name":"Cryptographic Signature Verification"},{"id":748,"feature_name":"DRBG"},{"id":747,"feature_name":"Key Destruction"},{"id":756,"feature_name":"Keyed-hash message authentication"},{"id":760,"feature_name":"SSH Server"}]}