ARCASATLINK by CYSEC provides end-to-end protection of telemetry, telecommand (TMTC), and payload data for satellite communications. It implements the Space Data Link Security (SDLS) protocol defined by the Consultative Committee for Space Data Systems (CCSDS). ARCASATLINK offers procedures to encrypt, decrypt, authenticate, and verify frames, manage key lifecycle, and configure virtual channels. It includes both ground and space software components, providing essential security services and cryptographic operations for CCSDS TMTC frames. The ground version was developed in a previous ESA GSTP project and is currently being tested by space operators. The space component requires space-validation before commercialization. ARCASATLINK targets the Satellite as a Service ecosystem and includes a pair of cryptographic libraries: one for ground deployment and the other for a satellite’s On-Board Computer (OBC) or communication subsystem. It provides functions to secure downlink and uplink frames to and from the satellite end-point. The core library contains all 22 functions as per SDLS standards, including ApplySecurity and ProcessSecurity for authenticated encryption using AES-GCM 256. It is designed for minimal CPU footprint and developed based on ECSS standards. ARCASATLINK can be offered as a library or a service, executed on-premise or in the cloud.
