PRIME |
|
PRIME is the UK's framework for ensuring interoperability between networked cryptographic devices. PRIME compliant devices provide a secure gateway that allows trusted entities and networks to securely exchange data over an un-trusted network. Roke is home to the UK's official Conformance Test Facility for PRIMEv1. Working in partnership with CESG, we provide the conformance testing that is required for PRIME certification.
The conformance certification process for PRIME requires that a device proves its conformance to the PRIME framework specifications by undergoing independent conformance testing at the CESG approved Conformance Test Facility at Roke. Please contact us for further details or to request a Statement of Work containing all pricing and timescale information. We are currently working alongside CESG to enhance the Tester for IP Modular Encryption (TIME) tool with tests for additional PRIME modules. This is the software used to test that a candidate PRIME device is conformant to the PRIME framework as part of the formal certification process. TIME can also be customised to provide bespoke testing of proprietary features which are not related to PRIME. In addition to formal testing, Roke recognises that cryptographic device vendors may require additional services before applying for formal testing. Thus the Roke CTF is able to provide a customised range of independent informal test support services, including:
In addition to providing conformance and interoperability testing of cryptographic devices, the Roke CTF can also provide the following additional types of testing Stress and Performance TestingOur customisable service enables us to work with you to specify the tests required to meet your needs. As well as the appropriate conformance specification tests, our engineers can specify other network tests suited to your application. This can include tests to stress the network and determine the performance envelope for a mix of voice, data and other services, even at throughputs of up to 10Gbps Full Network TopologyAs part of our customised service we can set up a full topology of network equipment to test the interactions between the crypto and other network devices, such as routers, firewalls and application servers. The network can be tailored to represent the end application network which allows a suite of end user tests to be applied and correct operation verified. In addition to interactions with network equipment, interactions with real-world network users using real applications can be emulated on the CTF test bed. This can be a very cost effective way to verify a network design prior to full procurement and installation. Full System TestingThe combination of the above, coupled with proven system test and software/firmware update processes used on our own in-house products mean that Roke are perfectly placed to specify and conduct either a part of or the full system testing suite of a crypto device. As cryptos evolve from simple encrypt/decrypt devices into sophisticated networking devices, detailed knowledge of end-to-end networks will be required to ensure that the device will work in a real deployment scenario. This knowledge is all available within a team which can be quickly ramped up and down to meet the needs of the customer. An external test facility with experience in fixed and mobile networks, in both the commercial and defence domains, can provide independent consultancy for networked systems as well as a capability to specify and run tests. Roke is such a facility, which is also used by CESG to formally test devices as part of the crypto conformance certification process. We can complement your design team by offering an expert independent and external view to any assumptions made during the design process. Having core hardware and software development skills also enables us to interact with all levels of your development team. Background in PRIMERoke have a long track record of working with the IETF standards on which network cryptographic equipment standards are based. We have been working with CESG to define the profiles for the HAIPE® specifications as well as providing a Conformance Test Facility for HAIPE® devices. Based on a strong background in HAIPE®, we’ve been working with CESG to provide the Tester for IP Modular Encryption (TIME) tool. This, together with our independence in the crypto marketplace, puts us in a unique position of independent experts in the PRIME domain. |

