![shutterstock_1742883383 [Converted].png](https://static.wixstatic.com/media/d68284_f42475e017384247b1be17c9e0a15a5b~mv2.png/v1/fill/w_621,h_388,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/d68284_f42475e017384247b1be17c9e0a15a5b~mv2.png)
Encryption
NIAP and FIPS Certified
![ccra_logo[23] - White.png](https://static.wixstatic.com/media/d68284_8c291ebc91ab43abb1f088eb7f3d3f6c~mv2.png/v1/fill/w_110,h_110,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/ccra_logo%5B23%5D%20-%20White.png)
Cellcrypt is built on a multi-layered approach to cryptographic security that provides maximum assurance for communications in Zero-Trust- Environments, where networks are assumed to be proactively compromised.
Employing an end-to-end key exchange, Cellcrypt ensures that for each message, file transfer, or voice call, a new keyset is generated, negating the need for centralized COMSEC key management.
The Cellcrypt Crypto Core secures data using multiple encryption layers to ensure that communications between authenticated endpoints are encrypted end-to-end.
By tunneling end-to-end encryption through a certified, NIAP-validated architecture, Cellcrypt meets and exceeds the requirements for protecting US classified Secret/Top Secret information.
Multi-Layer Encryption
1. NIAP Tuneling
Cellcrypt is NIAP validated to operate in an MA CP 2.5 architecture. The outermost layer and all server links are secured with TLS using NIST-validated algorithms (ECC-384 and AES-256).
This architecture is validated to protect US Classified Secret and Top Secret communications. Cellcrypt Federal provides this as a baseline but adds E2E encryption tunneled through the architecture.
NIAP Tunnel Architecture
2. Obfuscation
All data - voice, video, messages, and file attachments - are obfuscated using the ChaCha20-256 algorithm to mitigate any future potential AES vulnerabilities. This occurs before the data is encrypted through the Cellcrypt crypto core.
3. CNSA Encryption
The obfuscated data is secured end-to-end using a package of Elliptic Curve Cryptography (ECC) and Symmetric-Key Cryptography that meets or exceeds the key length standards of the Commercial National Security Algorithm (CNSA) Suite for Top Secret communications.
Working at the largest key strengths authorised by the CNSA specification, the Cellcrypt crypto provides an overall key strength of 256 bits (including EliKey Exchange).
Quantum-Safe End-to-End Encryption through a NIAP Tunnel Architecture
4. Post-Quantum Protection
The crypto core is cryptographically overlaid with a quantum-safe envelope allowing for algorithms, such as CRYSTALS-Kyber and Classic McEliece, to be layered and changed as standards in this area emerge, without affecting the strength of the underlying ‘classical’ CNSA encryption