Core Avionics Master Plan - NAVAIR - U.S. Navy

Core Avionics Master Plan 2011 Appendix A-2Systems Group (CPSG) is developing VINSON (KY-57/58) and ANDVT (AdvancedNarrow-band Digital Voice Terminal) Crypto Modernization (VACM) devices to replaceKY-57, KY-58, KY-99, KY-100 and KYV-5 stand-alone encryption devices. VACMdevices will be developed in accordance with the Tactical Secure Voice CryptographicInteroperability Specification (TSVCIS). The ARC-210‟s embedded COMSEC will beupgraded to meet the TSVCIS. Other applications will require other modern encryptionstandards, such as the Link Encryption Family Interoperability Specification (used by theKIV-7M) and HAIPE Interoperability Specification (used by HAIPE devices).Multiple Independent Level Security (MILS). (2012) MILS is a high-assurancesecurity accreditation allowing multiple security levels on the same terminal at separatetimes. When simultaneous operation is necessary, singular systems must operate withinone security controlled boundary. Data is moved between security domains throughtrustworthy monitors such as access control guards, "down-graders"/cross-domainsolutions, or crypto devices. Any MILS/MLS accreditation comparison should considerwhether the system accreditation can be limited to one security domain per singledeviceor if the application requires the accreditation of a single, more complex MLSkernel connecting multiple domains. The benefit of MILS accreditation is that mostapplications do not require maximal assurance between internal components as theyare in the same security domain.Programmable Crypto. (2013) NSA/Central Security Service (CSS) CryptographicModernization Initiative Requirements for Type 1 Cryptographic Products and NSAInformation Assurance (IA) Directorate policy expect that cryptographic engines for DoDequipment will have a software re-programmable capability. Future systems must meetcryptographic capabilities while eliminating the need to completely replace hardware.New programmable encryption devices will feature modular architectures with theprogrammability and scalability to accommodate a wide range of link and IP encryptionapplications.Stand-alone Encryption (VACM). (2013) VACM development is an Air Force ledeffort to provide a crypto mod compliant, drop in (Form, Fit & Function) replacement forthe KY-57, KY-99A, KY-58, KY-100 and CV-3591/KYV-5 stand alone encryptiondevices. Contract award is planned late FY10 with the expectation that NSA certificationwill occur in the FY13/14 timeframe.3. Advanced Research or Technology Development.Multi-Level Security (MLS). (2014-2017) MLS accreditation provides an interfacecapable of allowing a user to access and process content at multiple classification levelssimultaneously from a single system. MLS is implemented by separation mechanismsthat support both un-trusted and trustworthy applications through enforcement of one ormore internal security policies. These policies only authorize information flow betweenapplications/components in the same security domain.A-2 Information Exchange 21