User's Manual

Avaya Branch Gateway Manager 10.0 Page 67
15-601011 Issue 29r (Friday, November 02, 2012)B5800 Branch Gateway
Security Mode: Security Administration
4. Message Authentication
Message authentication ensures that all data sent by either the system or Branch Gateway Manager cannot be tempered
with (or substituted) by anyone else without detection. This involves the originator of the data producing a signature
(termed a hash) of the data sent, and sending that as well. The receiver gets the data and the signature and check both
match.
Any data sent may be optionally authenticated using a number of well known and cryptographically secure algorithms:
Algorithm
Effective hash size (bits)
Use
MD5
128
‘Minimal’ security.
SHA-1
160
‘Strong’ security.
In general the larger the hash size, the more secure the signature. However smaller hash sizes usually incur less
processing.
Avaya Branch Gateway supports message authentication using the Transport Layer Security (TLS) v1.0 protocol. In
addition, many cryptographic components of the TLS module have been FIPS 140-2 certified, indicating the accuracy of
implementation.