Optical Encryption Equipment

KG-189
HIGH SPEED STRATEGIC TRUNK ENCRYPTOR

The KG-189 is the next generation of trunk encryptors designed to be compatible with Synchronous Optical Network (SONET) standard interfaces. It provides optical transport at both the RED and BLACK interfaces to communications systems. The KG-189 program currently consists of models supporting two standard SONET data rates. The OC-3 model operates at 155 Mb/s and the OC-12 model operates at 622 Mb/s. The development of a model supporting the SONET OC-48 data rate of 2.5 Gigab/s has been terminated. The KG-189 is designed as a single chassis with interchangeable cards allowing the KG-189 to upgrade from OC-3 to OC-12 with minimal cost and no impact on installation. The KG-189 supports BENIGN fill capability, traditional key and remote loading of FIREFLY vectors. It is approved for use at all classification levels.

Inital pre-qualification deliveries were scheduled for January, 1997. Production of the KG-189 is scheduled to begin in March, 1997. The product was developed by Motorola GSTG and Nortel. Production of the KG-189 is provided by Motorola Sectel. The cost for the OC-3 model is $37,654, and the OC-12 model is $62,664.

Data Link Encryption Equipment

KG-94/94A and KG-194/194A
KIV-19
KG95
KG-135
KGR-68
KG-84A

The KG-94 and 194 are a family of full duplex key generators that provide encryption of digital traffic. The KG-94 and KG-194 are tactical versions of the KG-94A and KG-194A. The KG-94 is an upgraded version of the KG-94 design. All verions are cryptographically compatible with each other, as well as with the KG-81 and KG-95 within their respective data rates in the traditional key mode. When used in conjunction with the Interface Adapter Unit, they can be a direct replacement for the KG-27. The KG-194 and 194A are interoperable only with other KG-194(A) in the FIREFLY mode. The KG-94 and KG-194 family functions with MIL-STD 118/114, RS-422 and RS-449 standard synchronous interfaces. Encryption and decryption takes place at speeds of 9.6 Kbps to 13 Mbps. The KG-194 and 194A generators are compatible with FIREFLY remote re-keying and can also be keyed with the KSD-64A. Traditional keying is accomplished with the KOI-18, KYK-13, KYK-15, KOK-12, and the Data Transfer Device (AN/CYZ-10) for any of the KG-94s and 194s.

The KG-94 and 194 families may be used with fix plant and tactical trunk encryption devices. They are approved for use at all classification levels. The authorized vendor for this product is Group Technologies Corporation, located in Florida. The cost for the KG-94 is $2001, KG-94A is $1991, KG-94 conversion kit to 194 is $1169.95 and KG-94A conversion kit to 194A is also $1169.95.

BACK TO TOP

The KIV-19 is a new CCEP effort underway to develop a trunk encryption device that is functionally equivalent to a KG-194. The new equipment will be miniaturized and utilizes different physical connectors than the KG-194. The KIV-19 operates in traditional mode over full duplex, half duplex, or simplex broadcast channels. In FIREFLY mode, it operates only over full duplex channels. The KIV-19 supports data transfer rates from 9.6 Kbps to 13 Mbps.

The KIV-19 operates in tactical satellite terminals and conditions where weight is a consideration. It is planned for use at all classification levels. If a market materializes and the IDIQ contract is similar to the one used on the KIV-7, program is planned. The vendor is yet to be determined.

BACK TO TOP

The KG-95 is a family of full-duplex, fixed plant, bulk encryption/decryption key generators. There are three KG-95 equipment configurations. The KG-95-1 is a general purpose version of the KG-95, capable of operating at any data rate between 10 and 50 Mbps. It is compatible with the KG-81, KG-94/94A, 194/194A over their common data rates and when using traditional key. The KG-95-2 operates only at the fixed DS-3 data rate of 44.736 Mbps. It is fully compliant with ANSI T1.102-1987 for DS-3 transmission and reception. The KG-95R is two KG-95-2s in a dual frame. The frame provides for hot spare capability.

The KG-95 configurations have a MIL-STD 118/114 interface. All three equipment configurations are capable of operating form traditional, punched paper key or Remote Rekey Keying (RRK) material. Traditional key may be loaded via a KOI-18, KYK-13, KYK-15, or Data Transfer Device. Remote Rekey Keying (RRK) material is loaded via a KSD-64 or the Data Transfer Device and offers the user a one-year crypto period. When using RRK material, the operator must instruct the KG-95 to perform a change key operation once every twenty-four hour period. The daily operations required under traditional key and RRK material need to be initiated at one end of the link through the equipment's front panel or rear panel remote command lines. During traditional keying traffic, down time for a change key command is approximately 500 milliseconds. The down time during RRK is 30 seconds. The KG-95-1 operates at 10-50 Mbps. The KG-95R operates at the DS-3 rate of 44.376 Mbs.

These systems are approved for use at all classification levels. The manufacturer is Motorola Secure Telecommunications, Scottsdale, Arizona. The cost will depend on the size of the production run. Unit cost of previous production run was $7950 for a KG-95-2 and $16000 for KG-95R. Additional information may be obtained by accessing their web site, http://www.mot.com/GSS/SSTG/ged/iso/kg95.html.

BACK TO TOP

The KG-135 is a tactical, high-speed, half duplex, self-synchronizing serial data link key generator. It is designed for use in an uninhabited airborne environment at altitudes up to 100,000 feet and satisfies Tactical Rad-Hard specifications. The KG-135 is a "Load and Go" unit, which means it can start encrypting or decrypting, assuming a good checkword/key (CW/Key), when power is applied. The KG-135 has an external computer bus connection, key management interface, power supply, and appropriate TEMPEST filtering. It operates at speeds of 10 Mbps to 450 Mbps.

The KG-135 accepts standard paper tape key via KOI-18 or KYK-13. A maximum of six keys and associated checkwords may be loaded and stored directly into the Key Management portion of the KG-135 for retrieval. The KG-135 allows for key loading without using the Command Status port. Only one key may be used in this scenario. The external computer bus interface allows for status monitoring and transfer of stored CW/key into the KG-135 cryptologics. Key Management hardware automatically restarts the unit, reloads the last key in use, and resynchronizes on the re-application of power.

The KG-135 serves as an encryptor/decryptor for wide-band serial communications. It is approved for use at all classification levels. The authorized vendor is Motorola, Inc. The cost is estimated in the range of $100,000 to $200,000.

BACK TO TOP

The KGR-68 is a ground-based fixed-plant decryptor for weapons system testing and telemetry decryption. The KGR-68 can decrypt data at rates up to 10 Mbps. It accepts standard paper tape key via a KOI-18 or KYK-13. The KGR-68 will retain key for at least 30 seconds during power interruptions.

The KGR-68 is used as telemetry decryption in weapons testing. It is approved for use at all classification levels. The approximate cost is $6,000.

BACK TO TOP

The KG-84A is a general purpose encryption device that has four selectable traffic key slots, improved remote rekeying, and mandatory EIA-RS-449 control signed. It proceses data at digital rates from 50 to 9,600 baud (non-synchronous), up to 32,000 Kb/sec using its internal clock. It can operate at data rates up to 64,000 Kb/sec using an external clock for synchronization. It is capable of operating in full duplex, half duplex, or simplex modes.

The KG-84A may be used in tactical, strategic, ship/air, and fixed plant environments. It is approved for use at all classification levels. The KG-84A/C Benign Fill Upgrade Production program has been started and will produce modification kits for the KG-84A and KG-84C. These modification kits will allow for Benign Fill capability. The approximate cost for this product is $5,000. An upgraded version ranges from $980-1,113.

BACK TO TOP

STU Encryption Equipment

MOTOROLA STU-III SECTEL
MOTOROLA STU-III SECTEL CELLULAR
AT&T STU-III 1100/1150
AT&T STU-III 1900/1910
AT&T SECURE CELLULAR
SECURE TERMINAL EQUIPMENT

Motorola STU-III Secure Telephones (SECTEL) are secure voice/data telephone terminals. The STU-III/A is a version of the STU-III family designed for use within the NATO community. It contains all the basic STU-III functions and capabilities, while adding the STU-III modes of operation. The STU-III SECTEL models are black in color and incorporate the capability to store 17 net keying variables compared to the storage of one net keying variable with the Limit Rate Initial Production model. The STU-III models have two and four wire adapters built into the terminal.

The STU-III SECTELs operate at 2400, 4800, and 9600 bps full duplex secure voice. Secure digital data transmission is possible at 75, 110, 300, 600, and 1200 bps in the asynchronous mode. In the synchronous mode, digital data can be securely transmitted at 2400, 4800 and 9600 bps.

The STU-III is capable of being keyed in three different ways. For STU-III interoperability, the first uses the FIREFLY II key concept where all keys are in electronic form and initial keying can be done locally or by access to the Key Management Central Facility. No per call access is required. For STU-III interoperability, the second and third way uses the Bellfield Key Distribution Center (KDC) concept with per call access or commonly held NET key.

The Motorola STU-III SECTEL serves as two-wire and four-wire switched telephone systems used in CONUS and Overseas. They are approved for use at all classification levels. The authorized vendor is Motorola, Inc. The cost for a STU-III Sectel is $3,795.

BACK TO TOP

The AT&T STU-III Secure Voice/Data Terminal model 1100 single line terminal, and model 1150 multi-line terminal provide secure voice and data comunications between two sites. Secure communications can be established with any U.S. Government approved STU-III device. In the "clear" voice mode, the 1100/1150 series operate like any convention telephone.

In the secure data mode, the 1100/1150 can communicate with other STU-III devices at 2400 bps, 4800 bps, and 9600 bps in both synchronous and asynchronous data cells. It supports full duplex communications at all of these rates, and half duplex synchronous communications at the 2400 bps rate. Crypto ignition keys are used to activate the STU-III for secure communications.

The AT&T STU-III 1100/1150 are used to secure data and voice communication. This product is approved for the use at all classification levels. The authorized vendor is AT&T Secure Communications Products. The cost is $1,300.

BACK TO TOP

AT&T STU-III 1900/1910

The AT&T STU-III Secure Data Terminal models 1900 and 1910 provide secure digital data communication between two sites. Secure data transfers can be established with any U.S. Government approved STU-III device. The 1900 model can communicate with other STU-III devices at 2400 bps, 4800 bps, and 9600 bps in both synchronous and asynchronous full duplex communications. In addition to the data rate of the model 1900, the model 1910 operates at a maximum of 14400 bps. Asynchronous operation is not available at 2400 bps half duplex. Crypto- ignition keys are used to activate the STU-III for secure communications.

The AT&T STU-III 1900/1910 series are approved for use at all classification levels. The STU-III is a replacement of the STU-III 1900. The authorized vendor is AT&T Secure Communications Products. The cost for the 1900 series is $1,300 and the 1910 series is $2,000.

BACK TO TOP

Secure Terminal Equipmet (STE) is the next generation STU-III being designed to provide services far beyond the present STU-III devices. The STE offers backward compatibility with STU-III, while taking advantage of digital communications protocols like ISDN and future ATM. The initial release of STE will be an ISDN terminal. STE is designed to take advantage of the key and privilege management infrastructure developed under the Multi-level Information Systems Security Initiative (MISSI) Fortezza Plus Cards. The cryptographics for STE will be located on a removable Personal Computer Memory Card International Associate (PCMCIA) card. This card will be procured seperately.

Secure Terminal Equipment serves as a secure voice and data communication. It has been planned for use at all classification levels. The vendor is Lockheed Martin and Motorola Government Systems.

BACK TO TOP

Other Encryption Equipment

CONDOR
AT&T SECURE CONFERENCE SYSTEM
SSP3110 DATA STORAGE ENCRYPTOR
DATA TRANSFER DEVICE

The Condor is an effort to produce a security solution for commercial digital wireless systems. This includes cellular, mobile satellite, and personal communications systems. It is being designed to utilize the Fortezza Plus cryptographic card.

The CONDOR provides secure communications for commercial wireless services (CDMA cellular and Mobile Satellite). This product is currently under development. The CDMA (dual mode cellular) will be completed in March, 1998, Globalstar in August, 1998 and Iridium in August, 1998. The authorized vendor and cost is undetermined at this time.

BACK TO TOP

The AT&T Secure Conference System consists of a circuit board installed in a personal computer, a STU-III terminal, and a switch box connected at the host site. This configuration functions as a concentrator during a secure conference call. The circuit board can be installed in a 386 or 486 personal computer. The system requires a minimum of 640 K of RAM and MS-DOS 3.0 or higher to operate. A telephone conference can be provided for up to four secure terminals per circuit board. Multiple circuit boards may be installed in one computer to raise the number of secure terminals to a maximum of 12 units. The AT&T Secure Conference System can function with any STU-III devices at 2400 bps and 4800 bps in half duplex communication mode. Crypto-ignition keys are used at the STU-III terminal as usual. The computer with the circuit board installed will verify each participants clearance prior to initiating the conference.

This system is approved for use at all classification levels. The authorized vendor is AT&T Secure Communications Products. Contact the vendor for the cost.

BACK TO TOP

The SSP3110 encrypts sensitive data received from a host over the Small Computer Systems Interface (SCSI) and wrties it to a storage medium such as a floppy diskette, magnetic tape, or an optical disk. Stored data that is encrypted using this device may be treated as "unclassified". The maximum processing speed using the SSP3110 is 150 Kbps depending on the application.

Electronic keying is accomplished using KEKs on punched paper tape and TEKs on Smart Keys. TEKs are derived from NSA-supplied floppy diskettes and written to Smart Keys using a Key Management Loader. In pairs, TEKs are used for Two- Stations transport aplications, shared TEKs are used for Multi-Station transport applications, and Special Purpose TEKs are used for data storage applications. KEK loading requires KOI-18 Tape Reader and DS-102 Signal Converter.

The SSP3110 Data Storage Encryptor is approved for use at all classification levels. Tractor Aerospace has developed the Secure Retrieval Processor (SRP), which is a less expensive, decrypt-only, embeddable board-level companion to the SSP3110. The cost for the SSP3110 is $11,995, Key Loader Key Manager Software is $2,500, and Training is $3,000. The SRP price is not available.

BACK TO TOP

The Data Transfer Device (DTD) is an electronic fill device designed to replace the existing family of common electronic fill devices. The DTD can be programmed to store the secure transport of COMSEC and TRANSEC keys, Signal Operating Instructions, frequency hopping radio parameters, net control planning, and operating directions. The DTD is designed to be backward-compatible with current COMSEC fill devices. It provides enhanced security of communications and cryptographic keying material and simplifies the planning communications. The DTD is configured by software input rather than hardware modifications. An embedded crypto-ignition key allows flexibility in securely storing and transporting communications data. The DTD uses a replaceable keypad and is easily configured to work with either a standard 35-key keypad or a simplified 13-key keypad.

The Data Transfer Device is designed to replace the KYK-13, KYX-15 and KOI-18. This device is approved for storing, transporting and transferring cryptographic keys up to the Top Secret level. The authorized vendor is Group Technologies Corporation. The cost for this device is between $510-$560.

BACK TO TOP

MISSI Encryption Equipment

MULTI-LEVEL INFORMATION SYSTEMS
SECURITY INITIATIVE (MISSI)

The Multi-level Information Systems Security Initiative (MISSI) is an NSA effort to make available products that could be used to construct systems that would satisfy user Mutli-level Security (MLS) requirements. MISSI includes the development of products in four categories: the Crypto Peripheral, Network Security Management, Secure Network Server, and Workstation Security Applique. These products will comprise the set of security components needed to construct Automated Information System (AIS) that satisfy MLS requirements. MISSI establishes the structure for the placement of the components to achieve MLS at the workstation, LAN, or WAN levels as needed. This structure is designed to (1) protect data from unauthorized disclosure and modification; (2) identify and authenticate system users; (3) control access to data and system resources, and; (4) support source authentication and non-repudiation of messages. MISSI will be introduced in a four-phase release approach. Each release will provide four operational capabilities exceeding those of the previous release along with the required security services.

• Release 1 provides encryption and digital signature capability to protect unclassified but sensitive electronic mail and file transfers.

• Release 2 provides the capability to secure electronic mail through different level system-high environments with a multi-level range of Unclassified to Secret.

• Release 3 provides the capability to handle information in the range of Unclassified to Top Secret including file transfer.

• Release 4 adds performance improvements and robustness to the network security management capabilities in order to address new AIS technologies and large scale expansion.

BACK TO TOP

The following paragraphs describe the features and characteristics of MISSI products as they pertain to system performance, capabilities and characteristics.

Operation

MISSI components will support mandatory access controls to provide hierarchical (Unclassified, Confidential, Secret, Top Secret) and non-hierarchical ("compartmented") classifications. Discretionary access controls provide additional "need-to-know" granularity. All data stored and processed by MISSI components will be labeled with a designation of its criticality and sensitivity through the use of the Common Internet Protocol Security Option (CIPSO) labels and internal labels in a Trusted Computing Base (TCB).

The user operation requirements of MISSI hardware components will be compatible with those required to operate the AISs they secure. At the workstation level, a user's identity will be authenticated up to the Top Secret level with a local name, a personal password, and a physical token inserted into a reader associated with the workstation's MISSI component. The use of trusted software and trusted operating systems will provide protection from unauthorized interference or tampering. MISSI components will use CIPSO labels for mandatory access controls and a database/directory scheme for discretionary access controls. These access controls and those of the trusted operation system will permit users to specify and control sharing of files and programs and provide controls to limit the propagation of access rights.

BACK TO TOP

Networks

Initial MISSI components will operate on DDN X.25, CCITT 1984 X.25, IEEE 802.3, and Ethernet networks. Later releases are planned to evolve with communications network protocols such as ATM. MISSI systems are intended to be protocol independent below the lowest layer where security is applied. A Secure Network Server (SNS) providing a guard/gateway function will provide CIPSO labeling to route datagrams to the proper networks and prevent those labels from being inadvertently or deliberately altered. MISSI components communicating on Ethernet (TCP/IP based) networks will support Address Resolution Protocol functions to provide logical addressing. MISSI components will also support GOSIP X.25 protocols.

BACK TO TOP

Keying

MISSI components will rely on the Electronic Key Management System (EKMS) for keying and rekeying activities. Components will support FIREFLY technology.

BACK TO TOP

Equipment

The reliability, availability, and maintainability of MISSI hardware and software components will meet or exceed current industry standards for commercial off-the-shelf office environment applications. Some of the MISSI critical system characteristics are:

• MISSI hardware components designed for operation in a ground non-hostile environment.

• MISSI components which meet the appropriate EMI, EMC, and TEMPEST requirements consistent with supported networks.

• MISSI compoents handled according to Controlled Cryptographic Item (CCI) requirements.

• Integrated Logistics Support requirements for MISSI are hardware components that are maintainable at the organizational, intermediate, and depot levels. The Mean-Time-To-Repair (MTTR) figure for organizational and intermediate levels is 15 minutes. The MTTR figure for depot level maintenance is 30 minutes.

• MISSI software and hardware components will undergo periodic health checks automatically.

BACK TO TOP

Product Development

The Information Security (INFOSEC) product evolution of MISSI, as defined in the four-phased release approach and the four product categories previously mentioned, is explained in more detail by the following graphics.

BACK TO TOP

Mosaic

The Mosaic program is an implementation designed to support MISSI Release 1. This program provides a Personal Computer Memory Card International Association (PCMCIA) crypto card, which provides encryption of sensitive unclassified electronic mail (E-mail) messages. Under the Mosaic program, a Commercial Off The Shelf (COTS) networked workstation configured with a PCMCIA card bus or separate reader performs the required MISSI Release 1 functions.

The Mosaic program supports X.400 or Simple Mail Transfer Protocol (SMTP) E-mail on the Defense Message System, as well as other Department of Defense (DoD) and Civil Agency applications. This system is currently designed to operate at 1.5 Mbps encryption/decryption. The PCMCIA card is under going test in the Mosaic program.

BACK TO TOP

Workstation Security Applique (APPLIQUE)

The APPLIQUE is a low cost product that provides multi-level security services for COTS networked workstations. It consists of both a software package and a hardware device referred to as the Crypto Peripheral (CP). Capabilities include security services to support writer to reader security for X.400 based E-mail and peer-to-peer applications. The security services performed by the APPLIQUE are: access control, audit, data confidentiality, data integrity, identification, and authentication as well as non-repudiation. It consists integrates with a wide variety of 386/486 based processor COTS workstations and higher. The APPLIQUE consists of several basic elements that allow the user to communicate in networked environments with multiple security levels. These elements include: a communications security package, trusted computing base, CP and a physical token.

The communications security package includes these ISO layer 3 and 7 security protocols: Network Layer Security Protocol (NLSP1), Message Security Protocol (MSP), and Key Management Protocol (KMP). The APPLIQUE will support both the GOSIP and DoD (TCP/IP) protocol suites. The TMACH Security Monitor provides multi-level security services to the workstation user. The CP with an estimated minimum throughput rate of 10 Mbs/sec., performs FIREFLY key generation, encryption, and digital signatures. The Crypto Peripheral can make use of a PCMCIA device to provide the physical token and crypto-ignition key (CIK) functionally as a means for user identification and authentication. It is required to access security mechanisms in the CP.

BACK TO TOP

Crypto Peripheral (CP)

The CP is a compact security product that provides encryption of E-mail messages for COTS networked workstations. It is contained on a PCMCIA card and interfaces directly to the workstation through a PCMCIA card bus or reader. The CP is the workstation security product designed to support the MISSI Release 2 system, and to protect classified information up to Secret. The CP supports a wide variety of COTS workstations that support X.400 mail packages. It is specifically designed to support ISO layer 7 security protocols. Writer to reader security protection is provided between both for Official Use Only sensitive community of Release 1 and the Secret community served by Release 2, as well as Top Secret communities served by Release 3 and above. The CP is designed for a 10 Mbps throughput rate.

BACK TO TOP

Secure Network Server (SNS)

The SNS is a computer system designed to allow simultaneous processing of information from the Unclassified level up to Top Secret level. It combines the highest levels of both Computer Security and COMSEC technology. The SNS will allow the connection of two or more networks at different security levels and as a MLS network file server, the SNS will allow files of different security levels to be stored and accessed simultaneously. Application software being developed for the SNS will allow it to function as a guard/downgrader. The SNS will support the CP associated with an untrusted workstation during MISSI Release 2. It insures the CP has been invoked before releasing an E-mail message to an unclassified network and regrades E-mail by human review. In MISSI Release 3, the SNS in conjunction with the Workstation Security Applique, provides full E-mail security services including regrading and MLS file storage. An EKMS compatible cryptographic function in the SNS allows all data stored on non-removable media to be protected. This allows the SNS to be treated as an unclassified Controlled Cryptographic Item (CCI) once the CIK is removed. For the software applications developer, this MLS computer will provide a POSIX compliant interface at the operating system level. Therefore, it will be possible for the SNS to run existing UNIX based application programs.

BACK TO TOP

Network Security Management (NSM)

NSM provides network security management functions for the MISSI products. These functions consist of key generator and distribution, access control permissions, secure directory, and mail list services. It is a primary link to other network management functions, such as configuration management, fault management, accounting management, and performance management. The capabilities of the security management components will be phased, along with the various MISSI components. The NSM components needed to provide the above functions are the Domain Security Manager, Local Authority Workstation (LAW), Audit Manager, Rekey Agent (RKA), Secure Directory Server, and Mail List Agent. It is anticipated that these components will be software application programs that will run on COTS workstations equipped with a Workstation Security APPLIQUE. Together they will provide the necessary services to securely manage and operate the MISSI.