Cryptographic High Value Product (CHVP) Encryption

Cryptographic High Value Product (CHVP)

Closing the Mission Gap

Cryptographic High Value Products (CHVP) bridge the need for high assurance Type 1 security with reduced equipment handling requirements necessary for high risk environments.

 


 

What is a CHVP Encryptor?

CHVP stands for Cryptographic High Value Product. Per the Committee on National Security Systems (CNSS) Glossary (CNSSI 4009), CHVP products are NSA-certified and incorporate only unclassified cryptographic Commercial National Security Algorithms (CNSA) to protect data classified Secret and below. While CHVP does still incorporate NSA specified interoperability specifications such as HAIPE®, it is not considered CCI and has the benefit of less restrictive handling requirements. Reference CNSSI 4031 for CHVP handling requirements and responsibilities.

CHVP encryptors are considered NSA Type 1 as they are developed under the NSA’s rigorous high assurance development and certification process to protect voice and data classified SECRET and below in a single layer/device. There are CHVP encryptors NSA certified today to meet information assurance requirements for both data in transit and data at rest.

Examples: General Dynamics Mission Systems TACLANE®-C175N and TACLANE-C100 Encryptors.  

 

Where are CHVP Encryptors Used?

Due to their ability to interoperate with HAIPE protected enterprise networks (Type 1 CCI and CHVP) and the simplified handling requirements, CHVP encryptors are ideal for tactical edge, hostile, high risk environments or missions that require unmanned operations or leave behind, joint/coalition forces or security for non-National Security Systems. Reference CNSSP-28 for cryptographic security plan guidelines including encryption protections and recovery, tamper and zeroization feature requirements.

CHVP products are alternatives to Type 1 CCI encryptors as well as Commercial Solutions for Classified (CSfC) layered solutions. Example use cases include: telework or remote/mobile offices, unattended platforms, forward deployments, Joint Missions with Coalition or non-NSS partners such as Critical Infrastructure Key Resources (CIKR), the Defense Industrial Base (DIB) or Federal/Civil and State/Local government partners.

 

Additional Resources

Webinar: Choosing the Right Security Solution: Evaluating the Differences between High Assurance Type 1 and CSfC Solutions

WEBINAR: CHOOSING THE RIGHT SECURITY SOLUTION

There are currently various methods of securing classified information including high assurance Type 1 (CCI and CHVP) and Commercial Solutions for Classified (CSfC). While commonly assumed that Type 1 encryption and CSfC solutions are interchangeable from a capability and requirement satisfaction perspective, there are many differences that affect their operational security, utility, lifecycle logistics and maintenance costs. Watch this on-demand webinar to learn more.

On-Demand Webinar

Choosing the Right Security Solution Header Image

A GUIDE TO CHOOSING THE RIGHT SECURITY SOLUTION

For more information on the differences between high assurance Type 1 (CCI and CHVP) and Commercial Solutions for Classified (CSfC), request this whitepaper to learn more about key comparison criteria when researching the right security solution for your mission needs. Whitepaper: Choosing the Right Security Solution to Protect Your Voice and Data in Transit (Type 1 vs. CSfC).

Request Whitepaper

CSfC Quiz Call to Action

TEST YOUR SECURITY SOLUTIONS KNOWLEDGE

Do you know the key differences between encryption solutions for classified voice, data and network encryption? Test your knowledge here.

Test Your Knowledge With This Online Quiz

TACLANE-C175N CHVP Encryptor

TACLANE-C175N

The TACLANE-C175N CHVP encryptor is a small form factor HAIPE device with 200 Mb/s aggregate throughput.  The C175N is a non-CCI variant of the TACLANE-Nano (KG-175N) - the smallest, lightest, most power efficient HAIPE certified and available today. The C175N comes with advanced features for efficient networking and performance such as agile VLAN and PEP for Satcom.  The C175N also includes features approved for unmanned operations such as Render Useless Zeroize (RUZ).

Learn more about this product

Policy References

CNSSP-28, “Cybersecurity of Unmanned National Security Systems,” 6 July 2018

CNSSI 4009, “Committee on National Security Systems (CNSS) Glossary,” 6 April 2015

CNSSI 4031, “Cryptographic High Value Products (CHVP),” 9 September 2019

*Note you must view the CNSS website using Internet Explorer