SECURING FIBRE CHANNEL FABRICS - Brocade

Brocade Encryption InternalsFigure 9. Brocade FS8-18 Encryption Blade internal architectureThe components described in the following three sections areenclosed within a physical crypto boundary. The security boundary isdesigned to comply with the FIPS 140-2 standard at Level 3 to isolateall hardware components involved in the processing of cleartext keys.The encryption switch cover is the physical crypto boundary for theBrocade Encryption Switch and the encryption blade has a specialcover that encloses the necessary hardware on the card.Encryption FPGA ComplexThe FPGA complex is composed of several FPGAs and other hardwarecomponents. The principle encryption component is the FPGA (FieldProgrammable Gate Array). An FPGA is a programmable hardwaredevice that contains instructions to perform specific functions. Theadvantage of the FPGA is that it is programmable and the instructionscan be changed at any time. A new feature or enhancement can bemade without requiring a hardware upgrade.The FPGA complex is where the actual encryption and compression isperformed in the encryption device, in addition to a few other functions.Securing Fibre Channel Fabrics 189