TACLANE-Nano (KG-175N) Encryptor

Smallest, Lightest HAIPE® For Mobile Applications

Extremely compact and mobile, the new TACLANE-Nano provides end-to-end HAIPE encryption in the smallest, lightest and lowest power configuration than any HAIPE device available today. From battlefield to briefcase, the TACLANE-Nano is ruggedized to withstand the rigors of any mobile environment including tactical, mobile applications such as telework, dismounted deployments, and integration into mobile communications kits. The TACLANE-Nano is designed with the latest in crypto modernizaton technology to provide protection for information classified TS/SCI and below at 50 Mb/s throughput.

The TACLANE-Nano supports the bandwidth needed to support voice, video and data applications (such as real time video and data analytics) in mobile environments including:

  • Mobile Communications - Telework, Travel, Field Agent, Flyaway Kits
  • Dismounted, Tactical Forward Deployed
  • Unmanned Systems and Intelligence, Surveillance, Reconnaissance (ISR) Operations
  • Covert Operations
  • Embedment into Deployable Communication Kits and Platforms

Improved Performance over Disadvantaged Networks

To increase network availability and accelerate performance in disadvantaged networks, the TACLANE-Nano includes the Agile Performance Enhancing Proxy (PEP) software feature. The TACLANE Agile PEP function works by hosting a specialized version of TCP resulting in better performance than an end-to-end standard TCP. Integrating this technology eliminates the need for external PEP devices. When the Agile PEP function is enabled, it uniquely provides simultaneous support for concurrent TACLANE Agile PEP, Standard TCP connections and all HAIPE traffic types on a per packet basis. For more information, request the TACLANE Agile PEP Whitepaper. 

The TACLANE-Nano is currently in development and expected to be submitted for NSA certification 4Q 2018. Sign Up here to recieve product updates.


TACLANE-Nano Secure Mobile Encryptor for Classified Voice, Video, Data Communications

TACLANE Agile Performance Enhancing Proxy (PEP) Whitepaper

Request this whitepaper to learn more about how the TACLANE Agile Performance Enhancing Proxy (PEP) software feature increases network availability and performance over disadvantaged networks.

Request Whitepaper

Features

The TACLANE-Nano will support optional software such as VLAN and TCP Performance Enhancing Proxy (PEP). Remote management and configuration is supported via the GEM One Encryptor Manager to simplify operation and enable centralized secure management of all of your TACLANE devices on the network.

Key Features

  • Designed to protect information classified TS/SCI and Below

  • Simultaneous HAIPE v4.2.5 and IPMEIR 1.0 compliant

  • Simultaneous Suite A/B without user intervention

  • 50 Mb/s Throughput (100 Mb/s Aggregate) Greater throughput achievable dependent upon traffic mix

  • Small size (1.2”H x 3.5”W x 2.25”D)

  • Low power (5 Watts typical)

  • Hot swappable/redundant power from USB or Power over Ethernet (POE)

  • Embedded Agile TCP Performance Enhancing Proxy (PEP) for disadvantaged networks

  • Supports Agile VLAN feature for Layer 2/Layer 3 agility and advanced networking

  • Safe keying features including Classified/Unclassified Device Generated Shared Key (DGSK) and Exclusion Keys (EKs)

  • ACC and KMI OTNK compliant

  • IPv4/6 Dual Stack

  • MIL-STD-810G ruggedized / MIL-STD-461F EMI compliant

  • Supported by GEM One Remote Encryptor Manager

Optional Feature Enhancements:

Agile Virtual Local Area Network (VLAN): Adds Layer 2 VLAN tagged/ Non-IP Ethernet capability to the TACLANE encryptor enabling simultaneous HAIPE and Layer 2 traffic on a per packet basis without any infrastructure changes. TACLANE encryptors enabled with VLAN still interoperate with standard HAIPE encryptors. Other benefits include: equipment and cost savings, increased bandwidth efficiency, failover and redundancy.

TACLANE and GEM are trademarks of General Dynamics. HAIPE is a registered trademark of the National Security Agency. All other product and service names are the property of their respective owners.

Technical Specifications 

View Datasheet

Size 1.2”H x 3.5”W x 2.25”D
19” Rack mountable, 4 Across, 1U
Weight: <8 Oz
Power
5 Watts (Typical)
Battery: Coin-Cell Battery (CR2450HR)
MIL-STD 461F compliant USB power supply
Performance 50 Mb/s throughput (100 Mb/s aggregate)
Greater throughput is achievable dependent upon
packet size
Reliability
229,000 Hrs Mean Time Between Failure (MTBF)
Environment
MIL-STD-810G compliant
Operating Temp: -40° to +60°C
Storage Temp: -40°C to +85°C
Humidity: 95% RH, Non-condensing
Operational Altitude: 1,500 ft below sea level to 50,000 ft above sea level
Storage/transit Altitude: 1,500 ft below sea level to 70,000 ft above sea level
Shock/Vibration: 40g shock, 11ms Transportation Vibration, General Vibration, Category 4
Sand: 40 mph winds
Dust: 20 mph winds
Rain: Drip, Flow Rate 280 liters/meter2/hour
Drop Test: 48” High Drop
EMI / TEMPEST: In accordance with NSTISSAM TEMPEST/1-92 Level 1
Standards Compliance
HAIPE v4.2.5
Crypto Modernization compliant
IPMEIR v1.0
Advanced Cryptographic Capability (ACC)
KMI Over The Network Keying (OTNK)
Foreign Interoperability  Algorithm Agile – Simultaneous Suite A/B/AES
EFF/IPMEIR without manual intervention
P3, S2, Q2
Power Options
Supports three hot-swappable power options including front/rear panel USB-C connectors and Ciphertext RJ45 Power Over Ethernet (PoE)
Warranty
3 year hardware and software warranty
Keying
Supports KMI OTNK, ACC, Exclusion Key, HAIPE to HAIPE Keying, APPK/PPK, FIREFLY, Enhanced
FIREFLY, Internet Key Exchange (IKE) v1/v2, Classified/Unclassified Device Generated Shared Key (DGSK)
Networking Features & Protocols

Protocols Supported: TCP, UDP, IPv4/IPv6 Dual Stack, ICMP, IGMP, ARP, DHCP, MLD, TFTP, HTTPS, HTTP, RIP, RIPv2, RIPng, NDP, IKE, IKEv2, HAIPE, IPMEIR, OTNK, CMS, XML, non IP with VLAN, TCP PEP

Networking Features: Dynamic IP addressing, dynamic key management (key distribution through H-to-H key transfer  and KMI enabled, red address confidentiality and selectable dynamic discovery via Generic Discovery/Secure Dynamic  Discovery or IMPEPD, dynamic routing updates through RIP and discovery protocols, support for route of last resort, support for VLAN and layer 2 traffic

Management: Full SNMPv3 management and HTTP browser based management, GEM One Manager

Multicast: IGMP and MLD on Red and Black networks

Quality of Service: Type of Service Octet bypass, PCP to TOS mapping for VLAN traffic, ECN congestion control bypass

Fragmentation: Support for fragmentation and reassembly on Black network traffic and fragmentation of Red IP traffic

Network Interfaces

Plaintext Data Interface: Electrical / Mechanical - IEEE 802.3/Ethernet2; copper RJ-45 10/100 Base-T

Ciphertext Data Interface: Electrical/Mechanical - IEEE 802.3/Ethernet2; copper RJ-45 10/100 Base-T

Console Management Interface: Electrical/Mechanical - USB 2.0; USB-C connector

Standard DS-101 key fill port; Micro USB connector

Remote zeroize input; Micro USB connector

Primary power 5VDC; USB Type-C connector

24/7 Customer Support

You are never alone when you partner with General Dynamics to secure your critical information. With the largest deployed base of NSA-certified encryptors worldwide, General Dynamics is committed to support our customers worldwide with a 24/7 technical Help Desk.

Help Desk — Contact our technical Help Desk 24 hours a day / 7 days a week:
877-230-0236

Our Infosec support page is designed to make it easy for customers to access the information they need. Please visit www.gdmissionsystems.com/infosecsupport for the following support features: 

  • Product Update Notifications — Sign up to receive technical bulletins, upgrade notices and other important product information automatically via E-mail
  • Warranty Status — Enter the serial number of your encryption device to find out the date your warranty or maintenance expires
  • Depot Status— Track your encryptor through the depot
  • Order Status— Track the status of your orders
  • Software Requests — Request Software Upgrades for your TACLANE encryptors, GEM Patches and GEM Lite Software
  • Features

    Features

    The TACLANE-Nano will support optional software such as VLAN and TCP Performance Enhancing Proxy (PEP). Remote management and configuration is supported via the GEM One Encryptor Manager to simplify operation and enable centralized secure management of all of your TACLANE devices on the network.

    Key Features

    • Designed to protect information classified TS/SCI and Below

    • Simultaneous HAIPE v4.2.5 and IPMEIR 1.0 compliant

    • Simultaneous Suite A/B without user intervention

    • 50 Mb/s Throughput (100 Mb/s Aggregate) Greater throughput achievable dependent upon traffic mix

    • Small size (1.2”H x 3.5”W x 2.25”D)

    • Low power (5 Watts typical)

    • Hot swappable/redundant power from USB or Power over Ethernet (POE)

    • Embedded Agile TCP Performance Enhancing Proxy (PEP) for disadvantaged networks

    • Supports Agile VLAN feature for Layer 2/Layer 3 agility and advanced networking

    • Safe keying features including Classified/Unclassified Device Generated Shared Key (DGSK) and Exclusion Keys (EKs)

    • ACC and KMI OTNK compliant

    • IPv4/6 Dual Stack

    • MIL-STD-810G ruggedized / MIL-STD-461F EMI compliant

    • Supported by GEM One Remote Encryptor Manager

    Optional Feature Enhancements:

    Agile Virtual Local Area Network (VLAN): Adds Layer 2 VLAN tagged/ Non-IP Ethernet capability to the TACLANE encryptor enabling simultaneous HAIPE and Layer 2 traffic on a per packet basis without any infrastructure changes. TACLANE encryptors enabled with VLAN still interoperate with standard HAIPE encryptors. Other benefits include: equipment and cost savings, increased bandwidth efficiency, failover and redundancy.

    TACLANE and GEM are trademarks of General Dynamics. HAIPE is a registered trademark of the National Security Agency. All other product and service names are the property of their respective owners.

  • Specifications

    Technical Specifications 

    View Datasheet

    Size 1.2”H x 3.5”W x 2.25”D
    19” Rack mountable, 4 Across, 1U
    Weight: <8 Oz
    Power
    5 Watts (Typical)
    Battery: Coin-Cell Battery (CR2450HR)
    MIL-STD 461F compliant USB power supply
    Performance 50 Mb/s throughput (100 Mb/s aggregate)
    Greater throughput is achievable dependent upon
    packet size
    Reliability
    229,000 Hrs Mean Time Between Failure (MTBF)
    Environment
    MIL-STD-810G compliant
    Operating Temp: -40° to +60°C
    Storage Temp: -40°C to +85°C
    Humidity: 95% RH, Non-condensing
    Operational Altitude: 1,500 ft below sea level to 50,000 ft above sea level
    Storage/transit Altitude: 1,500 ft below sea level to 70,000 ft above sea level
    Shock/Vibration: 40g shock, 11ms Transportation Vibration, General Vibration, Category 4
    Sand: 40 mph winds
    Dust: 20 mph winds
    Rain: Drip, Flow Rate 280 liters/meter2/hour
    Drop Test: 48” High Drop
    EMI / TEMPEST: In accordance with NSTISSAM TEMPEST/1-92 Level 1
    Standards Compliance
    HAIPE v4.2.5
    Crypto Modernization compliant
    IPMEIR v1.0
    Advanced Cryptographic Capability (ACC)
    KMI Over The Network Keying (OTNK)
    Foreign Interoperability  Algorithm Agile – Simultaneous Suite A/B/AES
    EFF/IPMEIR without manual intervention
    P3, S2, Q2
    Power Options
    Supports three hot-swappable power options including front/rear panel USB-C connectors and Ciphertext RJ45 Power Over Ethernet (PoE)
    Warranty
    3 year hardware and software warranty
    Keying
    Supports KMI OTNK, ACC, Exclusion Key, HAIPE to HAIPE Keying, APPK/PPK, FIREFLY, Enhanced
    FIREFLY, Internet Key Exchange (IKE) v1/v2, Classified/Unclassified Device Generated Shared Key (DGSK)
    Networking Features & Protocols

    Protocols Supported: TCP, UDP, IPv4/IPv6 Dual Stack, ICMP, IGMP, ARP, DHCP, MLD, TFTP, HTTPS, HTTP, RIP, RIPv2, RIPng, NDP, IKE, IKEv2, HAIPE, IPMEIR, OTNK, CMS, XML, non IP with VLAN, TCP PEP

    Networking Features: Dynamic IP addressing, dynamic key management (key distribution through H-to-H key transfer  and KMI enabled, red address confidentiality and selectable dynamic discovery via Generic Discovery/Secure Dynamic  Discovery or IMPEPD, dynamic routing updates through RIP and discovery protocols, support for route of last resort, support for VLAN and layer 2 traffic

    Management: Full SNMPv3 management and HTTP browser based management, GEM One Manager

    Multicast: IGMP and MLD on Red and Black networks

    Quality of Service: Type of Service Octet bypass, PCP to TOS mapping for VLAN traffic, ECN congestion control bypass

    Fragmentation: Support for fragmentation and reassembly on Black network traffic and fragmentation of Red IP traffic

    Network Interfaces

    Plaintext Data Interface: Electrical / Mechanical - IEEE 802.3/Ethernet2; copper RJ-45 10/100 Base-T

    Ciphertext Data Interface: Electrical/Mechanical - IEEE 802.3/Ethernet2; copper RJ-45 10/100 Base-T

    Console Management Interface: Electrical/Mechanical - USB 2.0; USB-C connector

    Standard DS-101 key fill port; Micro USB connector

    Remote zeroize input; Micro USB connector

    Primary power 5VDC; USB Type-C connector

  • Customer Support

    24/7 Customer Support

    You are never alone when you partner with General Dynamics to secure your critical information. With the largest deployed base of NSA-certified encryptors worldwide, General Dynamics is committed to support our customers worldwide with a 24/7 technical Help Desk.

    Help Desk — Contact our technical Help Desk 24 hours a day / 7 days a week:
    877-230-0236

    Our Infosec support page is designed to make it easy for customers to access the information they need. Please visit www.gdmissionsystems.com/infosecsupport for the following support features: 

    • Product Update Notifications — Sign up to receive technical bulletins, upgrade notices and other important product information automatically via E-mail
    • Warranty Status — Enter the serial number of your encryption device to find out the date your warranty or maintenance expires
    • Depot Status— Track your encryptor through the depot
    • Order Status— Track the status of your orders
    • Software Requests — Request Software Upgrades for your TACLANE encryptors, GEM Patches and GEM Lite Software
  • Literature

Back to top