Overview of NATO Technology Trends Interoperability MIL + GOV devices; ED FN and ED MC Roadmap Jan Leduc Rohde & Schwarz SIT Prague, 01.04.2015
Agenda ı NATO Technology Trends & Interoperability SCIP NINE ı ELCRODAT Fixed Networks (ED FN) ı ELCRODAT Military Crypto (ED MC) ı ELCRODAT Migration 01.04.2015 Overview of NATO Technology Trends 2
NATO Technology Trends & Interoperability ı The SAVILLE Algorithm will be stepwise declassified by NATO ı NATO and Industries are working on cryptographic communication means for the future ı NATO Cryptographic Interoperability Strategy gives guidelines on how to achieve interoperability between nations 01.04.2015 Overview of NATO Technology Trends 3
NATO Technology Trends & Interoperability ı NATO Cryptographic Interoperability Strategy defines two protocols for interoperability Secure Communications Interoperability Protocol (SCIP) Networking and Information Infrastructure (NII) Internet Protocol Network Encryption (NINE) ı Both protocols are in standardization, but both have the same open points, when it comes to PKI, KMI and Algorithms ı One of the actual goals of this community in NATO is IP over everything, Everything over IP and Gateways to legacy systems only where absolutely necessary 01.04.2015 Overview of NATO Technology Trends 4
NINE vs SCIP Layer 7 - Application Layer 6 - Presentation Layer 5 - Session Layer 4 - Transport Layer 3 - Network Layer 2 Data Link Layer 1 - Physical NINE operates on Layer 3 Layer 7 Application Layer 6 - Presentation Layer 5 - Session Layer 4- Transport Layer 3 - Network Layer 2 Data Link Layer 1 - Physical SCIP operates on Layer 7 ı Hides (encapsulates) end-user IP address (infrastructure hiding) ı Encrypts Layer 3 and all layers above ı Signaling, encryption, rekey functions are not compatible with SCIP ı Does not allow to pass unencrypted information through higher layer (except TOS) ı Encrypts only Application layer ı Signaling, encryption, rekey functions are not compatible with NINE IS ı Allows equipment to support separate clear and secure applications 01.04.2015 Overview of NATO Technology Trends 5
NINE IS ı NINEs are system components that provide IPv4/IPv6 Traffic Protection, Networking, and Management features Wired, wireless, satellite, and hybrid networks Enclave or node protection (gateway or host) Standalone device or embedded in a terminal/host Host Enclave NINE NINE Enclave Host Cyphertext Wide Area Network Host Enclave NINE NINE Enclave Host In-Bound Out-Bound 01.04.2015 Overview of NATO Technology Trends 6
Secure Communications Interoperability Protocol ı SCIP, formally known as FNBDT (Future Narrow-Band digital Terminal) was developed by the US Government and national industry ı It has later been adopted by NATO to ensure secure end-to-end communications ı SCIP was first developed for circuit-switched networks, but was extended to also work over IP networks (SCIP over IP) ı It supports a Public Key Infrastructure, thus supports national sovereignty and interoperability in multi-national operations ı As it is an Application-Layer protocol (Layer 7), it is independent of the underlying physical link ı It supports HF-/VHF-/-UHF Radios, PSTN, IP (LAN, WiFi, 2G, 3G and 4G) 01.04.2015 Overview of NATO Technology Trends 7
NATO s Secure Voice Strategy Overview NATO HQ C 3 Staff NATO HQ C 3 Staff 01.04.2015 Overview of NATO Technology Trends 8
NATO Technology Trends & Interoperability ı For cryptographic interoperability NATO sets new standards: ı Different Crypto suites for different Applications Suite A algorithms are officially kept secret. Only and exclusively used for NATO and its member nations (MEDLEY und MERCATOR ) Suite B algorithms are public. Can be used for non-nato nations, Coalition partners, NGOs, etc. (AES) ı NATO focus is on certificate-based cryptos and automatic PKI Services Over-the-air keying/re-keying 01.04.2015 Overview of NATO Technology Trends 9
ED FN and ED MC for NATO ı NATO and Nations need for national and multinational Operations devices that implement SCIP and NINE ı There are two different devices needed (1) Tactical device which is fully ruggedized and has some legacy functionalities for green Applications (2) A sever room or desktop device which is multifunctional and flexible for white Applications ı Both of those capabilities can be offered by the successor products ELCRODAT Military Crypto (ED MC) ELCRODAT Fixed Networks (ED FN) ı Both devices offer similar, interoperable capabilities just for different environments 01.04.2015 Overview of NATO Technology Trends 10
ELCRODAT Migration 1990 2000 2010 Today 2020 ELCRODAT 4-2 Voice/Data encryption device ELCRODAT MC Voice/Data encryption device SCIP/NINE - IP based Maximum Synergy though R&S SIT Platform Concept ELCRODAT 6-2 Voice/Data encryption device ELCRODAT FN Voice/Data encryption device SCIP/NINE - IP based ELCRODAT 5-4 Voice/Data encryption device 01.04.2015 Overview of NATO Technology Trends 11
ELCRODAT Military Crypto (ED MC) ı Successor of ED4-2 Tactical, radio-detached joint, crypto device NINE for Data through IP Networks SCIP for Secure Voice und Data through heterogeneous Networks Minimal legacy functionality (To be discussed) 01.04.2015 Overview of NATO Technology Trends 12
ELCRODAT Fixed Networks (ED FN) ı Successor of ED5-4 und ED6-2 Tabletop / Server Room / Mobile Deployable Device SCIP for Secure Voice und Data through heterogeneous and insecure Networks NINE for Data through IP Networks No legacy Functionality in the device Gateway to the ED6-2 System 01.04.2015 Overview of NATO Technology Trends 13
Concept Study ED FN 01.04.2015 Overview of NATO Technology Trends 14