Flexible ethernet encryption systems and methods

An apparatus for Physical Coding Sublayer (PCS) encryption implemented at a first network element communicatively coupled to a second network element, the apparatus comprising:

• circuitry configured to encrypt a Flexible Ethernet (FlexE) signal based on a first encryption key with encryption applied to a 64b/66b bit stream associated with the FlexE signal at one or more of a FlexE client layer and a FlexE shim layer;
• circuitry configured to switch to a second encryption key at a predetermined point in the FlexE signal;
• and
• circuitry configured to encrypt the FlexE signal with the second encryption key subsequent to the switch to the second encryption key.

A network configured for Physical Coding Sublayer (PCS) encryption, the network comprising:

• a first network element;
• and
• a second network element communicatively coupled to the first network element,
• wherein the first network element is configured to
• encrypt a Flexible Ethernet (FlexE) signal based on a first encryption key with encryption applied to a 64b/66b bit stream associated with the FlexE signal at one or more of a FlexE client layer and a FlexE shim layer;
• switch to a second encryption key at a predetermined point in the FlexE signal;
• and
• encrypt the FlexE signal with the second encryption key subsequent to the switch to the second encryption key.