CEM
Compact Encryption Module (CEM) is C-DoT’s indigenously developed Quantum-safe IP Encryptor. CEM is based on Crystals-Kyber Key Encapsulation Mechanisms that is resistant to quantum computer-based attacks. Crystals-Kyber is a lattice based key exchange algorithm of NIST’s PQC standardization process, which has been selected for standardization. It relies on the hardness of Learning-With-Errors (LWE) problem defined over the module-lattices.
- Supports classical key exchange algorithms like DH, ECDH, etc.
- Supports Crystals-Kyber Post-Quantum Key Encapsulation Mechanism (PQ-KEM).
- Supports Hybrid key exchange using one classical (i.e. ECDH) and one Quantum-safe (i.e. Crystals-Kyber) algorithm.
- Certificate-based device authentication using PQC & Classical algorithms.
- Supports standard encryption algorithms like AES128, AES256 etc.
- Supports up-to 80Mbps Encrypted traffic
- Supports crypto-agility.
- Supports integration with any QKD system for key loading as per ETSI GS QKD 014 standard.
Interfaces
- Two 10/100/1000 Base-T interfaces (one plain and one cipher)
- One USB2.0 interface
- One RS232 serial interface
- Compact sized : 8.0” x 6.5” x 1.5”
- 12V DC (1 Amp) (220V AC to 12V DC adaptor shall be provided)
- No forced air cooling required
- Low power consumption < 10Watts
- For encryption
- For power
- CLI
- Network layer (L3) encryption
- VPN Client & VPN Server
- PQC Key Generator
This product along with QSSVIP (Quantum Secure Smart Video IP Phone) contributed towards C-DOT getting first prize in ELCINA Defennovation Award 2023 for “Excellence in R&D – Large Scale”
Some trials have been done and some are in-progress
- Supports classical key exchange algorithms like DH, ECDH, etc.
- Supports Crystals-Kyber Post-Quantum Key Encapsulation Mechanism (PQ-KEM).
- Supports Hybrid key exchange using one classical (i.e. ECDH) and one Quantum-safe (i.e. Crystals-Kyber) algorithm.
- Certificate-based device authentication using PQC & Classical algorithms.
- Supports standard encryption algorithms like AES128, AES256 etc.
- Supports up-to 80Mbps Encrypted traffic
- Supports crypto-agility.
- Supports integration with any QKD system for key loading as per ETSI GS QKD 014 standard.
Interfaces
- Two 10/100/1000 Base-T interfaces (one plain and one cipher)
- One USB2.0 interface
- One RS232 serial interface
- Compact sized : 8.0” x 6.5” x 1.5”
- 12V DC (1 Amp) (220V AC to 12V DC adaptor shall be provided)
- No forced air cooling required
- Low power consumption < 10Watts
- For encryption
- For power
- CLI
- Network layer (L3) encryption
- VPN Client & VPN Server
- PQC Key Generator
This product along with QSSVIP (Quantum Secure Smart Video IP Phone) contributed towards C-DOT getting first prize in ELCINA Defennovation Award 2023 for “Excellence in R&D – Large Scale”
Some trials have been done and some are in-progress