The Bulk Encryption Unit (BEU) provides secure data communication between two E1 exchanges. The BEU supports full duplex communication encrypts the data at a rate of 2 Mbps . The BEU is loaded with AES-128, HMAC-SHA-256 algorithms to provide cryptographic services such as confidentiality, data origin authentication and data integrity. The BEU also supports use of customized encryption algorithm instead of AES. The BEU employs a key-establishment protocol designed by SETS for key exchange between peer BEUs. The keys for encryption and decryption are generated by Hardware based True Random Number Generator.