Core Avionics Master Plan - NAVAIR - U.S. Navy

Core Avionics Master Plan 2011 Appendix A-22. Funded Enhancements and Potential Pursuits.Cypher Text Backbone, IPv6/IPv4 dual stack, Converged IP/Enhanced QoS,Increased Bandwidth (ADNS III). (2016) ADNS increment III is the next generation ofADNS and is currently implemented in NCTAMS LANT and PAC and being fielded onships. The primary requirement being met by ADNS III is the GIG requirement toimplement a Cipher Text (CT) core, implemented via NSA approved IP Security (IPSec) standards known as High Assurance Internet Protocol Encryption (HAIPE). Inorder to maintain backward compatibility with Increment II platforms not implementingHAIPE, both increments will be operating in the shore infrastructure through 2015. IOCfor a switch over to Increment III is 2016. This increment will provide:CT Backbone (aka as „black core‟) routing in compliance with GIG requirement.IPv6/IPv4 dual stack (IPv6 in compliance with GIG requirements).Converged IP/Enhanced QoS – All traffic, voice, data and video, will be IP withdynamic QoS and bandwidth management.Load distribution over all RF links.Increased bandwidth 25 / 50 Mbps per platform (requires capable RF link).D. SecurityCommunications Security refers to capability to protect information at allclassification levels against unauthorized interception and exploitation. Two aspects ofsecurity related to information exchange (IE) are: COMSEC (cryptographic encryption ofinformation, both voice and data) to deny unauthorized individuals information derivedfrom telecommunications and to ensure the authenticity of information; andTransmission Security (TRANSEC), the component of COMCSEC resulting frommeasures designed to protect transmissions from interception and exploitation bymeans other than cryptanalysis. COMSEC is an important consideration in all three IEdomains: LOS communications, BLOS communications, and IP networking.1. Current capabilities.Single Channel Ground/Airborne Radio System (SINCGARS), HAVEQUICK,SATURN, TTNT and Link 16 all employ TRANSEC to provide jam resistance andprevent interception of data via frequency-hopping and direct sequence spreading usingNSA approved algorithms. They also employ NSA Type I approved crypto securityalgorithms (Crypto algorithms) for voice / data encryption. Current radios are limited tooperating at one level of security. HAIPE is an NSA trademarked IP Security (IPSEC)Type I encryption standard mandated by NSA for encryption of classified informationtraversing IP networks. The current HAIPE standard is version 1.3.5.2. Funded Enhancements and Potential Pursuits.NSA Compliant Secure Communications. (2012) Existing algorithms currentlysupport secure communications, but are being phased out because they are no longercompliant with NSA requirements. In support of the need for crypto modernization,many embedded COMSEC radios and stand-alone encryption devices are beingupgraded to support modern cryptographic algorithms. The Air Force‟s CryptologicA-2 Information Exchange 20