T1 / E1 Circuit Encryption

The BlackBond is a “bump in the wire” device that seamlessly encrypts T1 / E1 and fractional T1 / E1 circuits. It’s extremely low latency allows it to encrypt the circuit without impact to voice, video and data T1 / E1 traffic.


The BlackBond uses the strongest commercially available cryptography and automatically rotates cryptographic keys at user defined intervals. Key generation is performed by a FIPS compliant Random Number Generator (RNG).


The BlackBond is effective at protecting data in motion in virtually any network environment. It is available as a stand-alone device for remote locations, or as a slot-card in a multi-slot chassis for central site locations.


For networks requiring both security and redundant circuits, the BlackBond can be ordered with a protection switching option. In this case, the encrypted traffic will switch to a backup T1 / E1 circuit if the primary T1 / E1 circuit fails. Alternatively, the traffic could be switched over to a backup packet based connection, such as 4G LTE. 




  • AES, 256 bit
  • Fully automatic key management (1 min to 42 day re-key interval)
  • Hardware Random Number Generator: NIST SP 800-90
  • Full duplex real-time encryption

WAN Network Interface

  • BlackBond T1
  1. ► 2 x T1 (1 “Red” / 1 “Black”)
  2. ► Framing: ESF 
  3. ► Line Code: B8ZS or AMI [web site is HDB3 or AMI]
  4. ► DS0 assignments from 1 to 24
  5. ► Non-contiguous configuration supported (x-y, z)
  • BlackBond E1
  1. ► 2 x E1 (1 “Red” / 1 “Black”)
  2. ► Framing: CRC4
  3. ► Line Code: HDB3 or AMI
  4. ► DS0 assignments from 1 to 32
  5. ► Non-contiguous configuration supported (x-y, z)

LAN Network Interface

  • 2 x 10/100 RJ45 Ethernet (full / half duplex)
  • Auto negotiation, or configured speed and duplex

LAN Network Protocols


Link Protector Option

  • Additional T1 / E1 port available as secondary circuit (switched to if primary fails)
  • Also, one of the LAN interfaces may be used as the secondary circuit (switched to if primary fails)


  • Command Line Interface (CLI)
  • Telnet with edit and paste template files
  • Console port for out of band management
  • SNMP
  • Remote configuration, monitoring and reset
  • Online software upgrade (TFTP, fully operational during upgrade)
  • Local and remote WAN loopbacks

Mounting / Physical

  • 19” rack mount (1U height)
  • Dimensions: 9” (L) x 7.3” (W) x 1.5” (H)
  • Optional Medeco Case
  • Available in multi-slot card chassis configuration


  • Input Range: 12 to 30 VDC, 1.0 Amp
  • Optional -48 VDC, 0.25 Amp
  • AC adaptor included (order per country) 


  • Optional Dual Power, Hot Standby


  • Operating Temperature: -10° to 50° C (0° to 132° F)
  • Operating Humidity: Up to 90% (Non-Condensing)
  • Optional Extended Temperature Range Available


  • CE
  • Safety: IEC 60950
  • EMC: CFR 47 Part 15 Sub Part B: 2002, EN55022: 1994+A1&A2, EN55024, ICES-003 1997, CISPR22 Level A
  • Wireline T1 / E1 circuits
  • Fiber T1 / E1 circuits
  • Microwave T1 / E1 circuits
  • Fractional T1 / E1 circuits (satellite, etc.)
  • Circuit protection switching for encrypted T1 / E1
  • Packet protection switching for encrypted T1 / E1



  • Sophisticated AES 256 bit key encryption
  • Automated symmetric key rotation
  • Secure key generation with FIPS RNG
  • Compact and highly reliable (no fans)
  • Stand-alone and chassis slot-card configurations
  • Plug and play functionality
  • Software Upgradable




  • T1 / E1 data is secure in the event of a breach
  • Supports both full and fractional T1 / E1 networks
  • Extremely low latency ensures voice, video 
    and data applications continue to operate seamlessly

  • Can completely “hide” original network traffic
    (including header / addresses)

  • Easy to setup and operate
  • Seamless integration into existing network
  • Doesn't consume compute resources from existing networking

  • Central and remote site configurations