secunet SINA L2 Box

The SINA L2 Box is a hardware-based Ethernet encryption appliance that operates at OSI Layer 2 (data link layer). It is designed for government agencies, critical infrastructure, and enterprises that require high-assurance encryption for transmitting classified or sensitive data over public or shared network infrastructure. The device is available in multiple variants: - SINA L2 Box S: Supports throughput up to 100 Gbit/s; approved for VS-NfD (Verschlusssache - Nur für den Dienstgebrauch / RESTRICTED classification) - SINA L2 Box S 50M compact: A compact form-factor variant for lower-bandwidth needs - SINA L2 Box H: Approved for higher classification levels up to GEHEIM (SECRET), NATO SECRET, and SECRET UE/EU SECRET; BSI-certified Key capabilities include: - Layer 2 point-to-point and ring-topology tunnel encryption between two or more sites or data centers - Hardware-based packet filtering: only cryptographically authenticated packets are forwarded; invalid packets are discarded at the hardware level - Smartcard-based authentication using SINA ID Tokens for secure key and configuration storage - Post-quantum cryptography support: uses pre-distributed symmetric long-term keys via PIN-protected smartcard to protect asymmetric key exchange; supports secret elliptic curve parameters to reduce quantum attack surface - Wavelength Division Multiplexing (WDM) support: enables Layer 2 encryption of 100 Gbit/s wavelength connections while separating cryptography and data transport responsibilities - SD-WAN compatibility for software-defined network management - Centralized management via SINA Management, which handles configuration, key/certificate lifecycle, and administration of up to thousands of SINA devices The product integrates into existing network infrastructure without topology changes and supports near-maintenance-free operation.