6

Critical Security Parameters

 

 

The following Critical Security Parameters (CSPs) are used by the module:

 

 

 

 

 

 

 

 

 

 

 

STORAGE

 

 

CSP

CSP TYPE

GENERATION

And

USE

 

 

 

 

ZEROIZATI

 

 

 

 

 

ON

 

 

 

 

 

 

 

Key

Encryption Key

Triple-DES

Hard-coded

Stored in flash,

Encrypts

(KEK)

168-bits key

 

zeroized by the

IKEv1/IKEv2

 

 

 

 

‘ap wipe out

preshared keys

 

 

 

 

flash’

and

 

 

 

 

command.

configuration

 

 

 

 

 

parameters

 

 

 

 

 

IKEv1/IKEv2 Pre-shared

64 character

CO configured

Encrypted in

Module and

secret

 

preshared

 

flash using the

crypto officer

 

 

key

 

KEK; zeroized

authentication

 

 

 

 

by updating

during

 

 

 

 

through

IKEv1/IKEv2;

 

 

 

 

administrative

entered into

 

 

 

 

interface, or by

the module in

 

 

 

 

the ‘ap wipe

plaintext

 

 

 

 

out flash’

during

 

 

 

 

command.

initialization

 

 

 

 

 

and encrypted

 

 

 

 

 

over the IPSec

 

 

 

 

 

session

 

 

 

 

 

subsequently.

 

 

 

 

 

IPSec session encryption

168-bit

Established during

Stored in

Secure IPSec

keys

 

Triple-DES,

Diffie-Hellman key

plaintext in

traffic

 

 

or

agreement

volatile

 

 

 

128/192/256

 

memory;

 

 

 

bit AES

 

zeroized when

 

 

 

keys;

 

session is

 

 

 

 

 

closed or

 

 

 

 

 

system powers

 

 

 

 

 

off

 

 

 

 

 

 

IPSec session

HMAC

Established during

Stored in

Secure IPSec

authentication keys

SHA-1 keys

Diffie-Hellman key

plaintext in

traffic

 

 

 

agreement

volatile

 

 

 

 

 

memory;

 

 

 

 

 

zeroized when

 

 

 

 

 

session is

 

 

 

 

 

closed or

 

 

 

 

 

system powers

 

 

 

 

 

off

 

 

 

 

 

 

 

40

Page 40
Image 40
Dell W- AP92, W-AP105, AP-92, AP-175, AP-93, W-AP93, W-AP175, AP-105 manual Critical Security Parameters, Hmac