Self-Tests, Non-FIPS 140-1 Mode | Nortel Networks NN46120-104

12.0 Self-Tests 251

DES 3DES ** SHA-1 RSA Sign RSA Verify

See the table in services section to identify the conditions necessary for performing various HSM commands in the FIPS140-1 mode.

No plaintext private or symmetric keys can cross the cryptographic boundary when the HSM is in the FIPS140-1 mode.

**The 3DES algorithm is used to secure private or symmetric keys stored in flash and for the key wrapping and unwrapping functions.

11.2 Non-FIPS 140-1 Mode

In the non-FIPS140-1 mode, the user has greater flexibility in the types of algorithms that can be performed and the manner that keys are handled. For example, in the non-FIPS140-1 mode, the board can perform all the functions of the FIPS140-1 mode plus other functions like MD5 and RC4. In the non-FIPS140-1 mode, keys may cross the cryptographic boundary in plaintext form for certain operations (e.g. DES, RSA CRT exponentiation). It is still possible to store keys on the board so that they cannot be extracted. These non-extractable keys will be erased if a tamper attempt is detected. See the table in services section to identify the conditions necessary for performing various HSM commands in the non-FIPS140-1 mode.

12.0 Self-Tests

The following table describes all of the cryptographic self-tests performed by the HSM module. The following abbrethroughtion is used:

KAT = Known Answer Test

Self-Test	FIPS 140-1	Non-FIPS	When performed
	Mode	140-1 Mode

RSA Encrypt	Yes	Yes	Power-up, Self-Test
/Decrypt and			Service (ondemand)
Sign/Verify KATs

DES KAT	Yes	Yes	Power-up, Self-Test
			Service (ondemand)

3DES KAT	Yes	Yes	Power-up, Self-Test
			Service (ondemand)

SHA-1 KAT	Yes	Yes	Power-up, Self-Test
			Service (ondemand)

DSA KAT	No	Yes	Power-up, Self-Test
			Service (ondemand)

MD5 KAT	No	Yes	Power-up, Self-Test
			Service (ondemand)

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.

Nortel Networks NN46120-104 manual Self-Tests, Non-FIPS 140-1 Mode

Models: NN46120-104

11.2 Non-FIPS 140-1 Mode

12.0 Self-Tests

Self-Test

FIPS 140-1

Non-FIPS

When performed

Mode

MD5 KAT

Copyright © 2007-2008 Nortel Networks

NN46120-104 specifications