Senetas CypherNET CN9000 Series network encryptors: Ultra-fast 100Gbps network encryption hardware with ultra-low latency; protecting ‘mega data’ applications.

The CN9100 is the world’s first commercially available certified high-assurance 100Gbps Ethernet network encryptor that supports all Layer 2 network topologies.

About the CN9000 Series

Like all CypherNET CN network encryptors, the CN9000 Series provides maximum high-assurance network data security, without compromising network and application performance. It boasts ultra-low latency of just 1.5 microseconds in customer testing.

Developed in collaboration with customers and service providers, CN9100 network encryptors are designed to meet the exacting requirements of all 100Gbps use cases:

  • Data-centre to data-centre interconnect
  • SaaS cloud services
  • High-speed data aggregation
  • Fully meshed, ultra-fast bandwidth campus network environments
  • Fully certified encryption hardware

Integration for KeySecure

Senetas’ CN (and CV) Series network encryptors include integrated support for KeySecure, the industry’s leading centralised key management platform.

KeySecure provides simple and secure encryption key management across the entire lifecycle; including key generation, storage, distribution and deletion.

CypherNET CN9000 Series Key Features

Model CN9120
Network Protocol Ethernet
Maximum Speed 100Gbps
Ethernet point-to-point, hub & spoke, mesh full-duplex encryption
Protocol and application transparent
Common Criteria EAL2+ EAL4+
FIPS 140-2 Level 3
Low overhead full duplex line-rate encryption
Front panel access for all interfaces
Ultra-low latency for high performance < 2 micro-seconds
Support for external (X.509v3) CAs
Robust standards-based AES encryption algorithm
CRL and OCSP (certificate) server support
Automatic ‘zero touch’ key management
Flexible encryption policy engine
Encrypts Unicast, Multicast and Broadcast traffic
Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms) QSFP28
Network Interface MAN – Inphi ColorZ – links (up to 80kms)^ QSFP28
Support for Jumbo frames
Self-healing key management in the event of network outages
Automatic network discovery and connection establishment
Policy-based on VLAN ID
‘Store and forward’ data transmission mode support
Centralised configuration and management using CM7 and SNMPv3
AES 128 and 256-bit keys
Remote management using SNMPv3 (in-band and out-of-band)
Encryption modes CTR
Secure and tamper-proof enclosure
User swappable AC and/or DC power supplies ✓, Dual
Anti-probing barriers
Dual swappable AC or DC power supplies
Flexible encryption policy engine
User replaceable fans ✓, Fan tray
Interoperable with other CN Series – 100% (same protocol)
SNMPv1/2 monitoring (read-only)
NTP (time server) support
In-field firmware upgrades

^Longer distance use of the Inphi ColorZ QSFP28 interface may require other network devices. Requirements should be discussed with Senetas or a qualified service provider.

Senetas Logo
Senetas Logo