Network Testing

In addition to providing conformance and interoperability testing of cryptographic devices, the Roke CTF can also provide the following additional types of testing

Stress and Performance Testing

Our customisable service enables us to work with you to specify the tests required to meet your needs. As well as the appropriate conformance specification tests, our engineers can specify other network tests suited to your application. This can include tests to stress the network and determine the performance envelope for a mix of voice, data and other services, even at throughputs of up to 10Gbps

Full Network Topology

As part of our customised service we can set up a full topology of network equipment to test the interactions between the crypto and other network devices, such as routers, firewalls and application servers. The network can be tailored to represent the end application network which allows a suite of end user tests to be applied and correct operation verified. In addition to interactions with network equipment, interactions with real-world network users using real applications can be emulated on the CTF test bed. This can be a very cost effective way to verify a network design prior to full procurement and installation.

Full System Testing

The combination of the above, coupled with proven system test and software/firmware update processes used on our own in-house products mean that Roke are perfectly placed to specify and conduct either a part of or the full system testing suite of a crypto device. As cryptos evolve from simple encrypt/decrypt devices into sophisticated networking devices, detailed knowledge of end-to-end networks will be required to ensure that the device will work in a real deployment scenario. This knowledge is all available within a team which can be quickly ramped up and down to meet the needs of the customer.

In addition to providing network testing of cryptographic devices, we can also provide the following types of conformance and independent interoperability testing

PRIME

PRIME is the UK's framework for ensuring interoperability between networked cryptographic devices. As such, the conformance certification process requires that a PRIME device proves its conformance to the PRIME framework.

We are currently working alongside CESG to provide a Tester for IP Modular Encryption (TIME) tool. The software will be used by the Roke CTF to test that a candidate PRIME device is conformant to the PRIME framework. We will also soon be offering a complete conformance and interoperability testing solution, including the provision of an independent conformance testing service. To accompany the formal testing service, a selection of informal services will also be available.

• Read more about our PRIME services

HAIPE

HAIPE® is a framework for ensuring interoperability between networked cryptographic devices. Formal CTF testing for HAIPE® devices consists of conducting independent conformance and interoperability testing on a cryptographic device, where the test results feed directly into CESG’s certification process.

In addition to formal testing, Roke recognises that cryptographic device vendors may require additional services before applying for formal testing. Thus the Roke CTF is able to provide a customised range of independent informal test support services, including:

• Support in setting up the HIT tool at the vendor’s premises
• Customisation of the HIT tool
• Informal CTF testing prior to application for formal testing

• Read more about our HAIPE services

Secure Voice

An interoperable secure voice cryptographic solution allows classified phone calls to take place over unclassified infrastructure. We are currently working with CESG to identify the requirements for a Secure Voice testing facility. To accompany the formal testing service, a selection of informal services will also be available.

• Read more about our Secure Voice services

An external test facility with experience in fixed and mobile networks, in both the commercial and defence domains, can provide independent consultancy for networked systems as well as a capability to specify and run tests. Roke is such a facility, which is also used by CESG to formally test devices as part of the crypto conformance certification process. We can complement your design team by offering an expert independent and external view to any assumptions made during the design process. Having core hardware and software development skills also enables us to interact with all levels of your development team.

Background in Network Testing

We have a long track record of working with various network equipment products, including large cellular, satellite and fixed line networks. We even proved the feasibility of using IP backhaul links instead of leased lines between cellular base stations and a mobile network operator’s core network by thoroughly testing the proposed solution against a number of use cases and scenarios. All of this knowledge coupled with our proven track record in the IP crypto domain and Roke’s independence in this marketplace puts us in a unique position of being able to offer comprehensive network testing services which aren’t just limited to cryptographic devices.