NSA Next Gen Encryption

[CurtissWright]

Is the NSA Next Gen Encryption approved for classified processing, and is it used for passwords?

[Marvin Rhoads]

You are mixing concepts. NSA type 1 encryption algorithms can be used within an approved system that processes US national security classified information. They have also awarded some contracts that are called "next generation encryption".

However, Cisco uses the term differently when referring to certain algorithms which have nothing to do the classified information. They do have newer methods of protecting device passwords stored in the running configurations and those are recommended by some NSA-published hardening guides.

[CurtissWright]

Thanks Marvin. That explains a lot as there was some confusion with the Cisco NSA terminology, and if it is similar to NSA Type 1 encryption. If possible, can you provide me with any links to protecting device passwords that you mentioned in your response?

[Marvin Rhoads · Accepted solution]

Sure things @CurtissWright . For password protection best practices, please see documents such as this one:

https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-16/220270-use-cisco-ios-xe-hardening-guide.html#toc-hId--497390711

[CurtissWright]

Thanks a ton Marvin. I appreciate all your help. Have a good day.