|
|
FONT RESIZE |
ServiceS
Suite B
The National Security Agency (NSA) in the United States recently decided to mandate cryptographic algorithms in support of SECRET and TOP SECRET communications in government and military systems. By mandating the algorithms, the NSA felt that they could encourage interoperability among departments in the United States but also with allies. Suite B includes the following algorithms:
| Encryption: | Advanced Encryption Standard (AES) - FIPS 197 |
|---|---|
| Digital Signature: | Elliptic Curve Digital Signature Algorithm - FIPS 186-2 | Key Exchange: | Elliptic Curve Diffie-Hellman or Elliptic Curve MQV Draft NIST Special Publication 800-56 |
| Hashing: | Secure Hash Algorithm - FIPS 180-2 |
AES with either 128 or 256-bit keys and SHA-256 are specified to protect classified information up to the SECRET level. Protecting TOP SECRET information requires the use of 256-bit AES keys combined with SHA-384.
For asymmetric algorithms, the NSA has mandated the conversion of equipment to Elliptic Curve Cryptography (ECC). At the very high security level required for SECRET and TOP SECRET communications, an RSA key length of 4096 or 8192 would have been required and made the asymmetric algorithms very inefficient on all but the most powerful processors. Therefore, the much lighter ECC algorithm was chosen using the 256-bit prime modulus elliptic curve as specified in FIPS-186-2 for the protection of classified information up to the SECRET level. Use of the 384-bit prime modulus elliptic curve is required for the protection of TOP SECRET information.
Elliptic has both hardware and software solutions that are targeted specifically at Suite B. Elliptic also offers consulting services to help customer develop new products compliant with Suite B or adapating existing products to meet the standard. One of the key focus areas for Elliptic consultig is deciding what operations are done in software and what should be offloaded in hardware. Elliptic consultants can offer customers guidance on the most effective solution and can work with Ellipsys software which fully supports hardware engine integration in support of the final design agree with the customer.
