Cisco Systems, Inc.
All contents are Copyright © 1992–2003 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 9 of 10
Cryptographic Standards Supported
Cisco PIX Security Appliances support numerous cryptographic standards and related third-party products and
services, including the following:
System Requirements
Asymmetric (public key) encryption algorithms RSA (Rivest, Shamir, Adelman) public/private key pairs,
512 bits to 2048 bits
Symmetric encryption algorithms AES: 128, 192, and 256 bits
DES: 56 bits
3DES: 168 bits
RC4: 40, 56, 64, and 128 bits
Perfect Forward Secrecy (Diffie-Hellman
key negotiation)
Group 1: 768 bits
Group 2: 1024 bits
Group 5: 1536 bits
Hash algorithms MD5: 128 bits
SHA-1: 160 bits
X.509 certificate authorities Baltimore UniCERT
Entrust Authority
Microsoft Windows 2000 Certificate Services
VeriSign OnSite
X.509 certificate enrollment protocols SCEP
Platforms supported Cisco PIX 501 Security Appliance
Cisco PIX 506 Security Appliance
Cisco PIX 506E Security Appliance
Cisco PIX 515 Security Appliance
Cisco PIX 515E Security Appliance
Cisco PIX 520 Security Appliance
Cisco PIX 525 Security Appliance
Cisco PIX 535 Security Appliance
Minimum RAM 32 megabytes (MB), except the Cisco PIX 501 Security Appliance, which
requires 16 MB
Minimum Flash memory 16 MB, except the Cisco PIX 501, 506, and 506E Security Appliance models,
which require 8 MB
Expansion cards supported Single-port 10/100 Fast Ethernet card
4-port 10/100 Fast Ethernet card
Single-port Gigabit Ethernet, multimode (SX) SC, card
VPN Acceleration Card (Cisco VAC)
VPN Acceleration Card+ (Cisco VAC+)
