A3LA-RG Guide Version B
Document Number: 451-93156-009B
34 of 180
9
AES-256
B
IT
E
NCRYPTION
The A3LA-RG modem has a built-in AES-256 encryption software module. It can transmit either
encrypted or unencrypted data in all modes—dial up, direct internet, RUDICS, SBD, and SMS.
The A3LA-RG does not support encrypted voice calls. All voice calls are made in the ‘clear’
unless an external encryption module is hooked to it, such as the General Dynamics® Sectéra.
When encryption is enabled and for non-packetized data transmission modes including dial-up,
direct internet, and RUDICS, the A3LA-RG sends data in NAL Research’s proprietary format
called packet send mode. Packet send mode is implemented to handle AES-256 frame
synchronization between the A3LA-RG and a connected device. The encryption and decryption
keys are matched in each frame to ensure NIST FIPS 140-2 compliance.
Instructions on how to use encryption can be found in
. The list of AT
commands used to set encryption include ^CCOP, ^KD, ^KE, ^KZ, ^STR, and ^UE. The encryption
algorithm implemented into the A3LA-RG complies with NIST FIPS 140-2 as defined in the
following documents: (
https://csrc.nist.gov/publications/detail/fips/140/2/final
1.
Security Requirements for Cryptographic Modules, FIPS PUB 140-2, US Department of
Commerce, National Institute of Standards and Technology, May 25, 2001
2.
Security Requirements for Cryptographic Modules, Annex A: Approved Security
Functions for FIPS PUB 140-2, US Department of Commerce, National Institute of
Standards and Technology, February 19, 2003
