Lantronix 900-618 manual Enable Encryption, To configure AES encryption on the xPico

8: Setup Mode: Advanced Settings

Enable Encryption

Rijndael is the block cipher algorithm chosen by the National Institute of Science and Technology (NIST) as the Advanced Encryption Standard (AES) to be used by the US government. The xPico supports 128-, 192-, and 256-bit encryption key lengths.

Note: Configuring encryption should be done through a local connection to the serial port of the xPico, or via a secured network connection. Initial configuration information, including the encryption key, is sent in clear text over the network.

To configure AES encryption on the xPico:

1.When prompted to enable encryption, select Y.

2.When prompted, enter the encryption key length. The xPico supports 128-, 192-, and 256-bit encryption key lengths.

3.When prompted to change keys, select Y.

4.At the Enter Keys prompt, enter your encryption key. The encryption keys are entered in hexadecimal. The hexadecimal values are echoed as asterisks to prevent onlookers from seeing the key. Hexadecimal values are 0-9 and A-F.

For a 128-bit key length, enter 32 hexadecimal characters.

For a 192-bit key length, enter 48 hexadecimal characters.

For a 256-bit key length, enter 64 hexadecimal characters

5.Continue pressing Enter until you return to the Change Setup menu.

6.From the Change Setup menu, select option 9 to save and exit.

Encryption only applies to the port selected for data tunneling (default 10001 for Channel 1 and 10002 for Channel 2), regardless of whether you are using TCP or UDP.

Generally, one of these situations applies:

Encrypted xPico-to-xPico communication. Be sure to configure both modules with the same encryption key.

Third-party application to xPico-encrypted communication: xPico uses standard AES encryption protocols. To communicate successfully, products and applications on the peer side must use the same protocols and the same encryption key as the xPico.

xPico User Guide 59