ML041970088
| ML041970088 | |
| Person / Time | |
|---|---|
| Site: | Salem, Hope Creek  |
| Issue date: | 07/13/2004 |
| From: | Bhalchandra Vaidya NRC/NRR/DLPM |
| To: | Mannon S Public Service Enterprise Group |
| vaidya B, NRR/DLPM, 415-3308 | |
| References | |
| TAC MC3678, TAC MC3679, TAC MC3680 | |
| Download: ML041970088 (5) | |
Text
July 13, 2004 Mr. Steve R. Mannon Nuclear Safety and Licensing Manager PSEG Nuclear LLC-X04 Post Office Box 236 Hancocks Bridge, NJ 08038-0236
SUBJECT:
SALEM NUCLEAR GENERATING STATION, UNITS 1 AND 2 AND HOPE CREEK GENERATING STATION, UNIT 1 - USE OF ENCRYPTION SOFTWARE FOR SECURE TRANSMISSION OF SAFEGUARDS INFORMATION (TAC NOS. MC3679, MC3680 AND MC3678)
Dear Mr. Mannon:
By letter dated June 21, 2004, you requested approval to use encryption software for the transmission of Safeguards Information (SGI) for Salem Nuclear Generating Station, Units 1 and 2 and Hope Creek Generating Station, Unit 1. Specifically, you requested approval for the use of Pretty Good Protection (PGP) Software (Enterprise, Corporate, or Personal) Desktop Version 8.0 or the latest validated version developed with PGP Software Development Kit (SDK) 3.0.3 for encryption of sensitive unclassified SGI.
Title 10 of the Code of Federal Regulations (10 CFR) Section 73.21(g)(3) states, in part,
... Safeguards Information shall be transmitted only by protected telecommunication circuits (including facsimile) approved by the NRC. The Nuclear Regulatory Commission (NRC) considers those encryption systems that the National Institute of Standards and Technology (NIST) has determined conform to the Security Requirements for Cryptographic Modules in Federal Information Processing Standard (FIPS) 140-2, as being acceptable. The Secretary of Commerce has made use of Cryptographic Module Validation Program products mandatory and binding for Federal agencies when a Federal agency determines that cryptography is necessary for protecting sensitive information.
PGP Software Corporate Desktop Version 8.0 was developed with PGP SDK 3.0.3. NIST Certificate, Number 394, validates compliance of this software development tool with FIPS 140-2 requirements. Therefore, the NRC staff finds the use of this encryption software acceptable for processing and transmitting SGI electronically for your sites. Later versions of PGP Software Corporate Desktop are also acceptable provided that:
- 1.
They were developed using a software development tool e.g., PGP SDK 3.0.3 that meets and is validated by NIST to FIPS 140-2 requirements.
- 2.
You notify the NRC of your intention to update your encryption software 30 days prior to its first use. When notifying the NRC, include a description of the new software you will be using and provide a statement indicating NIST certification of the software development tool.
S. R. Mannon It is important to remind you that in accordance with 10 CFR 73.21(a), you are required to establish and maintain an information protection system that satisfies 10 CFR 73.21(b) through (i). Compliance with the provisions of 10 CFR 73.21, including the use of encryption software for transmittal of SGI, is mandatory and inspectable.
Additionally, only one public key is to be generated per site. The PGP file containing the public key must be named according to the following syntax: LastName_FirstName_SiteName.asc.
This naming convention represents the organizational point of contact indicated as owning the key-pair.
As stated in letter dated May 5, 2004, from R. P. Zimmerman, NRC, Office of Nuclear Security and Incident Response, to Stephen D. Floyd, Nuclear Energy Institute (NEI), please provide the public key for transmitting sensitive, unclassified SGI and the point of contact information (name, telephone number and e-mail address) to NEI and the NRC points of contact provided below. Once this information has been provided, we will provide a copy of the NRC public key to your point of contact. All SGI holders must employ an appropriate credentialing process to verify that individuals providing public keys are legitimate users. Private keys must be controlled as SGI.
The NRC point of contact for all transmittals related to the review and approval of the supplemental responses to the security orders is Mr. Bhalchandra K. Vaidya, Project Manager, Security Plan Review Team, Division of Licensing Project Management, who can be reached at (301)415-3308, or via e-mail at bkv@nrc.gov. For transmittal of other SGI, and for public key coordination, the NRC point of contact is Mr. Louis Grosman, Office of the Chief Information Officer, who can be contacted at (301)415-5826, or via e-mail at lhg@nrc.gov. As coordinated with the NEI, the industry point of contact for public key coordination is Mr. James W. Davis, who can be reached at (301)739-8105 and via e-mail at jwd@nei.org.
Encrypted SGI information shall be transmitted as attachments to an e-mail directed to sprt@nrc.gov. The e-mail message must also contain the name of the NRC staff member who is to receive the attachments.
If you have any questions, please contact me at (301)415-3308.
Sincerely,
/RA/
Bhalchandra K. Vaidya, Project Manager Security Plan Review Team Division of Licensing Project Management Office of Nuclear Reactor Regulation Docket Nos. 50-272, 50-311, and 50-354 cc: See next page
ML041970088 OFFICE SPRT/PM SPRT/LA NSIR/DNS/SC OCIO/PMAS SPRT/SC NAME BVaidya CHawes SMorris LHGrosman JNakoski DATE 7/7/04 7/7/04 7/7/04 7/8/04 7/9/04
Hope Creek Generating Station and Salem Nuclear Generating Station, Unit Nos. 1 and 2 cc:
Mr. Timothy J. OConnor Vice President - Operations PSEG Nuclear - X15 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. John T. Carlin Vice President - Nuclear Assessment PSEG Nuclear - N10 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. David F. Garchow Vice President - Engineering/Tech Support PSEG Nuclear - N28 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. Michael Brothers Vice President - Site Operations PSEG Nuclear - X15 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. Gabor Salamon Manager - Nuclear Safety and Licensing PSEG Nuclear - N21 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. Steven R. Mannon Acting Manager - Licensing PSEG Nuclear - N21 P.O. Box 236 Hancocks Bridge, NJ 08038 Jeffrie J. Keenan, Esquire PSEG Nuclear - N21 P.O. Box 236 Hancocks Bridge, NJ 08038 Ms. R. A. Kankus Joint Owner Affairs PECO Energy Company Nuclear Group Headquarters KSA1-E 200 Exelon Way Kennett Square, PA 19348 Lower Alloways Creek Township c/o Mary O. Henderson, Clerk Municipal Building, P.O. Box 157 Hancocks Bridge, NJ 08038 Dr. Jill Lipoti, Asst. Director Radiation Protection Programs NJ Department of Environmental Protection and Energy CN 415 Trenton, NJ 08625-0415 Brian Beam Board of Public Utilities 2 Gateway Center, Tenth Floor Newark, NJ 07102 Richard Hartung Electric Service Evaluation Board of Regulatory Commissioners 2 Gateway Center, Tenth Floor Newark, NJ 07102 Regional Administrator, Region I U.S. Nuclear Regulatory Commission 475 Allendale Road King of Prussia, PA 19406 Senior Resident Inspector Salem Nuclear Generating Station U.S. Nuclear Regulatory Commission Drawer 0509 Hancocks Bridge, NJ 08038
Hope Creek Generating Station and Salem Nuclear Generating Station, Unit Nos. 1 and 2 cc:
Hope Creek Resident Inspector U.S. Nuclear Regulatory Commission Drawer 0509 Hancocks Bridge, NJ 08038 Mr. Carl J. Fricker Plant Manager - Salem PSEG Nuclear - N21 P.O. Box 236 Hancocks Bridge, NJ 08038 Mr. James A. Hutton Plant Manager - Hope Creek PSEG Nuclear - X15 P.O. Box 236 Hancocks Bridge, NJ 08038