CES-128 voice encryptor option
274 Manpack Transceiver 2110 series Reference Manual
Overview
The CES-128 voice encryptor is an optional feature that provides high-grade security for
voice communications. This feature uses CES secure keys, secure modes, and PINs to
provide various levels of secure communications.
In order to communicate securely between two stations, both stations must use the same
channel frequency and secure key. The CES-128 voice encryptor may be programmed
with multiple secure keys, any one of which may be selected. In addition to the secure
keys, the CES-128 voice encryptor provides a PIN facility, which temporarily varies the
level of security on the key for a private session.
For secure communications within your organisation you must set up secure keys in the
Corporate secure indexes that are common to all transceivers in your organisation. If you
need to have secure communications with other organisations operating the same type of
equipment as yours, you can use the fixed Global secure key that is common to all
CES-128 voice encryptors shipped from Codan. The Global secure key provides secure
communications, however the security is less than that provided by a secure key in a
Corporate secure index. The PIN facility may also be used with the Global secure key to
increase the level of security.
The CES-128 voice encryptor remembers the last-used state if the transceiver is switched
off then on again. The encryptor allows secure operation to remain on during scanning.
Secure standby mode is permitted and remains on until
*
is pressed again (see page 285,
Using the CES-128 voice encryptor in standby mode).
The CES-128 voice encryptor uses a Base secure key in secure index 0. This key, along
with the selected secure key in a Corporate secure index, is used as the seed for the
encryption algorithm. The Base secure key may only be changed using a CICS command
(secure key #0 <key>). It cannot be programmed via the front panel or via the Key
Management Software. Changing the Base secure key changes the seed for the
encryption algorithm. Transceivers must use the same Base secure key and secure key in
a Corporate secure index for secure communication.
NOTE
To use the CES-128 voice encryptor, you must have the hardware option
fitted and specific firmware programmed into the transceiver and enabled.
NOTE
The CES-128 voice encryptor may be used in conjunction with the
AES-256 digital data encryptor. The data is handled via an internal RM50
HF Data Modem. For more information see page 326, Using the AES-256
digital data encryptor with a voice encryptor.
NOTE
Codan’s Key Management Software may be used to generate secure keys
and to fill the CES-128 voice encryptor.
NOTE
For firmware earlier than V5.11, you can use a special command in the
Message 10 entry to ensure that the CES-128 voice encryptor remembers
the last-used state if the transceiver is switched off then on again. This
command also allows secure operation to remain on during scanning (see
page 476, Controlling access to CES-128 voice encryptor options).