https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998745#M1108056 <P>Thanks Marvin. That explains a lot as there was some confusion with the Cisco NSA terminology, and if it is similar to NSA Type 1 encryption. If possible, can you provide me with any links to protecting device passwords that you mentioned in your response?</P> Wed, 17 Jan 2024 18:06:09 GMT CurtissWright 2024-01-17T18:06:09Z https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998721#M1108050 <P>Is the NSA Next Gen Encryption approved for classified processing, and is it used for passwords?</P> Wed, 17 Jan 2024 17:27:13 GMT https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998721#M1108050 CurtissWright 2024-01-17T17:27:13Z https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998738#M1108055 <P>You are mixing concepts. NSA type 1 encryption algorithms can be used within an approved system that processes US national security classified information. They have also awarded some contracts that are called "next generation encryption".</P> <P>However, Cisco uses the term differently when referring to certain algorithms which have nothing to do the classified information. They do have newer methods of protecting device passwords stored in the running configurations and those are recommended by some NSA-published hardening guides.</P> Wed, 17 Jan 2024 17:57:00 GMT https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998738#M1108055 Marvin Rhoads 2024-01-17T17:57:00Z https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998745#M1108056 <P>Thanks Marvin. That explains a lot as there was some confusion with the Cisco NSA terminology, and if it is similar to NSA Type 1 encryption. If possible, can you provide me with any links to protecting device passwords that you mentioned in your response?</P> Wed, 17 Jan 2024 18:06:09 GMT https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4998745#M1108056 CurtissWright 2024-01-17T18:06:09Z https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4999778#M1108121 <P>Sure things <a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1666565">@CurtissWright</a> . For password protection best practices, please see documents such as this one:</P> <P><A href="https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-16/220270-use-cisco-ios-xe-hardening-guide.html#toc-hId--497390711" target="_blank">https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-16/220270-use-cisco-ios-xe-hardening-guide.html#toc-hId--497390711</A></P> <P>&nbsp;</P> Thu, 18 Jan 2024 12:38:12 GMT https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4999778#M1108121 Marvin Rhoads 2024-01-18T12:38:12Z https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4999843#M1108127 <P>Thanks a ton Marvin. I appreciate all your help. Have a good day.&nbsp;</P> Thu, 18 Jan 2024 13:02:36 GMT https://community.cisco.com/t5/network-security/nsa-next-gen-encryption/m-p/4999843#M1108127 CurtissWright 2024-01-18T13:02:36Z