Data security on ethernet LANs

A software independent solution for Ethernet LAN security is given by introducing a hardware device between protected host and network. The device gives the host access only to data addressed to it, without interfering with communication between unprotected hosts, which operate independently of the protected system. The purpose of this paper is to describe the thinking behind the design of a practical implementation of the above mentioned device. This will include the choice and design of the the encryption system and the key management system. The paper will first discuss the design requirements and then describe how they were Implemented. A detailed description of the encryption algorithm, simulated one time pad key system with distributed management is also given. Finally, there will be a discussion of the performance of tested systems.