Got it

About encryption features of WDM/OTN equipment

Latest reply: Jul 29, 2020 19:10:05 540 5 3 0 0

Hi there!

This time, I will share with you the encryption features of WDM/OTN equipment.


The WDM/OTN devices of Huawei support port-level service encryption as well as various services and rates. The AES-256 algorithm is used to encrypt the OPUk payload.


All-service port-level encryption network:

Encryption features

Encryption features of Huawei WDM/OTN equipment:

Item

Specification

Encryption type

Bidirectional P2P service encryption

Unidirectionally static P2P/P2MP service encryption

Dynamic multicast service encryption

Typical service type

SDH/SONET, Ethernet, OTN,   SAN, and video services

Minimum encryption unit

Board port level. Users can be allocated by port and port-specific encryption can be configured. In this way, service applications are more flexible.

Encryption algorithm

The standard AES-256   encryption algorithm in CTR mode is used, which has the highest security level.

Key algorithm

The key is dynamically generated.

Bidirectional P2P service encryption: key negotiation based on the Diffie-Hellman algorithm.

Unidirectionally static P2P/P2MP service encryption: key calculation based on the PBKDF2 algorithm.

Dynamic multicast service encryption: key calculation based on the PBKDF2 algorithm.

Key management

The public key information is stored in the OPUk overhead and   can be transparently transmitted over a third-party network.

The key change period is configurable.

Anti-eavesdropping

The SMT and NEs   communicate with each other using the SSL/TLSv1.2 protocol, preventing   management information from being eavesdropped.

Anti-spoofing

A pair of devices checks   the peer end's authentication information before starting key negotiation.


That's all, Thank you!

  • x
  • convention:

Unicef
MVE Created Jul 29, 2020 04:12:55

The text on table is slightly bold :)
View more
  • x
  • convention:

liqiang185
liqiang185 Created Jul 29, 2020 06:09:34 (0) (0)
I see, thanks!  
wissal
MVE Created Jul 29, 2020 06:02:24

Detailed explanation, learned
View more
  • x
  • convention:

liqiang185
liqiang185 Created Jul 29, 2020 06:09:56 (0) (0)
Thank you!  
be_lo
Created Jul 29, 2020 19:10:05

Thank you for sharing
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.