AC-17(02) Protection of Confidentiality and Integrity Using Encryption

Self-assessed, not audited

We hold no certification or authorization. The status below is our own assessment, kept as OSCAL in Git; it is not an auditor's finding. "Planned" means not built.

Control statement

Implement cryptographic mechanisms to protect the confidentiality and integrity of remote access sessions.

Guidance

Virtual private networks can be used to protect the confidentiality and integrity of remote access sessions. Transport Layer Security (TLS) is an example of a cryptographic protocol that provides end-to-end communications security over networks and is used for Internet communications and online transactions.

Implementation

Cloudflare Tunnel and WARP access

Remote sessions are encrypted (WARP WireGuard/MASQUE to Cloudflare, tunnel QUIC/TLS to cloudflared). Partial: not FIPS 140-validated as deployed.

Status: partial.

Evidence:

• https://github.com/zeta-reticuli-inc/talos-multicloud/blob/main/modules/cluster-tunnel/main.tf

All controls. Source: OSCAL component definition reti-platform and NIST SP 800-53 Rev 5 (public domain).