8: Setup Mode: Advanced Settings
Enable Encryption Rijndael is the block cipher algorithm chosen by the National Institute of Science and
Technology (NIST) as the Advanced Encryption Standard (AES) to be use d by the
US government. The xPico supports 128-, 192-, and 256-bit encryption key lengths.
Note: Configuring encryption should be done through a local connection to the se rial
port of the xPico, or via a secured network connection. Initial conf iguration
information, including the encryption key, is sent in clear text over the n etwork.
To configure AES encryption on the xPico:
1. When prompted to enable encryption, select Y.
2. When prompted, enter the encryption key length. The xPico supports 128-, 192-,
and 256-bit encryption key lengths.
3. When prompted to change keys, select Y.
4. At the Enter Keys prompt, enter your encryption key. The encryption ke ys are
entered in hexadecimal. The hexadecimal values are echoed as asterisk s to
prevent onlookers from seeing the key. Hexadecimal values are 0-9 and A-F.
For a 128-bit key length, enter 32 hexadecimal characters.
For a 192-bit key length, enter 48 hexadecimal characters.
For a 256-bit key length, enter 64 hexadecimal characters
5. Continue pressing Enter until you return to the Change Setup menu.
6. From the Change Setup menu, select option 9 to save and exit.
Encryption only applies to the port selected for data tunneling (default 1 0001 for
Channel 1 and 10002 for Channel 2), regardless of whether you are using T CP or
UDP.
Generally, one of these situations applies:
Encrypted xPico-to-xPico communication. Be sure to configure both modules
with the same encryption key.
Third-party application to xPico-encrypted communication: xPico uses standar d
AES encryption protocols. To communicate successfully, products and
applications on the peer side must use the same protocols and the s ame
encryption key as the xPico.
xPico User Guide 59