Abstract: A first communication apparatus obtains a first ciphertext data stream, and sends the first ciphertext data stream. The first ciphertext data stream includes a first alignment marker (AM) and an encrypted first data segment. At least one of some bits in a first AM lock information field in the first AM, some bits in a first lane identification information field in the first AM, or some or all bits in a first check information field in the first AM carry encryption parameter information of the first data segment.

Abstract: This application provides a status notification method, an optical module, a network device, and a network system. The method includes: determining a lock status of a logical lane in a first optical module, where the first optical module belongs to a first network device, and the lock status includes a locked state or an unlocked state; and sending uplink notification information when the lock status indicates that the logical lane in the first optical module is locked, where the uplink notification information is used to enable a second optical module to determine that the logical lane in the first optical module is locked, the second optical module belongs to a second network device, and the first optical module is connected to the second optical module.

Abstract: This application is applied to the field of communication technologies, and provides a data transmission method, a communication apparatus, and a communication system, to resolve a problem in the conventional technology that user bandwidth is occupied during encrypted transmission. The method includes: generating N ciphertext data streams, where a first ciphertext data stream is any ciphertext data stream in the N ciphertext data streams, the first ciphertext data stream includes at least two first alignment markers AMs and at least two ciphertext data segments, one ciphertext data segment is included between every two first AMs, one first AM is included between every two ciphertext data segments, the at least two first AMs are used for aligning data of the N ciphertext data streams.

Abstract: This application provides a data transmission method, a communication apparatus, and a communication system. The method includes: generating N ciphertext data flows, where a first ciphertext data flow is any one of the N ciphertext data flows, the first ciphertext data flow includes at least two first alignment markers AMs, at least two encryption parameter sets, and at least two ciphertext data segments, one ciphertext data segment and one encryption parameter set are included between every two first AMs, the at least two first AMs are used for data alignment of the N ciphertext data flows; and sending the N ciphertext data flows. The solution may be applied to a physical layer of an optical module or a network device.

Abstract: This disclosure provides an encryption/decryption system, an optical module, and a related apparatus and system, and belongs to the field of network communications technologies. The encryption/decryption system includes an encryption/decryption component, a first interface component, and a second interface component. The encryption/decryption component is configured to encrypt a first physical layer data stream from the first interface component and transmit the encrypted first physical layer data stream to the second interface component, and is configured to decrypt a second physical layer data stream from the second interface component and transmit the decrypted second physical layer data stream to the first interface component. According to this disclosure, a delay caused by encryption/decryption during data transmission can be reduced.