Tait P25 Encryption Solutions*

One of the greatest benefits of P25 radio systems is the inherent ability to encrypt all the voice and data calls. It is an essential feature for organisations needing secure communications, and can improve the efficiency and safety of their staff and the communities they serve.

Encryption enables secure communication of voice and data between parties across a P25 system by:

  • Securing the message: by digitising it first, and then encrypting the message with an algorithm and a unique cryptographic key.
  • Transmitting the message: sending it to the receiver, where it can only be unlocked by using the same algorithm and key as the transmitter.

Key Fill Device

Key Fill Device (KFD)

The KFD is a hand-held PDA used to deploy keys to a radio using a wired protocol and is the easiest and simplest means of securing a radio fleet.

  • TEK and KEK management
  • Key inventory display and logging of key deployment
  • Keyset swapping of active and inactive keysets
  • User-friendly key database storage and identification
  • Key deployment to active or inactive keysets in radios.
  • Zeroise all radio keys
  • Import/export keys for deployment to / from other Tait KFDs

Key Management Facility

Key Management Facility (KMF)

Tait is currently developing a KMF capable of deploying encryption keys with over-the-air rekeying (OTAR) and effectively manage the encryption of radio fleets.

  • IP-connected KMF server
  • Update groups of radios with OTAR
  • Troubleshoot radios with diagnostics
  • KMF and KFD compatibilty to aid usability, and to store and forward keys
  • Locate color-coded CKRs with ease.

As part of Tait's complete P25 encryption solution, Tait's P25 Console Gateway (conventional) and Trunked Analog Gateway (trunked) perform encryption and vocoding functions to allow TaitNet P25 networks to be connected to dispatch consoles which do not support the P25 digital console interfaces (DFSI for conventional, CSSI for trunked). Many customers want to use their existing consoles, or plan to buy consoles which do not support the digital interfaces, and these gateways allow that.

The right encryption solution itself will depend on the size of your organisation and the potential security threat. Tait’s encryption solution consists of a Key Fill Device (KFD), Key Management Facility (KMF) and a full suite of OTAR enabled P25 portables (TP9155/60) and mobile (TM9155).

P25 radios operate with two encryption algorithms - the classic DES 56 bit encryption and the extremely secure 256 bit AES algorithm. AES is quickly becoming the standard deployed by most security-conscious organisations, whereas DES, although still extremely secure, tends to be used for communications with legacy equipment.

Over-the-air-rekeying (OTAR) with Tait radios

If there is ever a chance that you will need radios with encryption, then ensure you purchase portables and mobiles with this capability. Tait’s TP9155/60 portables and TM9155 mobile radios are encryption capable and supported by OTAR. In addition they are FIPS 140-2 certified (Federal Information Processing Standards) by NIST.

OTAR is a fast and efficient way of sending new keys to radios, and is clearly the best solution for encryption management. The benefit is an efficient use of money and time because OTAR allows administrators to schedule remote key updates and respond quickly to lost or stolen radios. It is important to note that OTAR requires the Tait P25 radios to have the correct Software Feature Enablers (SFEs) installed within them.

Key Management Facility

A KMF is a centralised client-server program that enables organisations to deploy, store and manage P25 encryption keys over-the-air (OTAR). A KMF is essential for larger organisations that have a large fleet of radios, numerous levels of security or several teams and fleets requiring different encryption.

By utilising a KMF, organisations will be able to rekey radios using OTAR, stage the rekeying of radios so more secure teams have more frequent rekeying and identify genuine problems without needing to touch a radio.

Standard P25 compliant functionalities are among the platform features of the Tait KMF, including the ability to add, delete and modify keys, zeroise and inhibit/uninhibit radios, and rekeying. However, the Tait KMF includes a series of industry-leading features that have been designed to improve user efficiency and talk-group assignment functionality. In addition to these extra functions, the Tait KMF has been designed with the user in mind.

Key Fill Device

The Tait Key Fill Device (KFD) enables agencies' encryption specialists and radio technicians to manage their workflows, making the process of encrypting digital radios as efficient and error-free as possible.

The KFD is a hand-held PDA used to deploy keys to a radio using a wired protocol and is the easiest and simplest means of securing a radio fleet. The Tait KFD is great for small fleets and deploying keys in the field. Software options provide a range of user benefits, making it possible to select a product that is very flexible and capable of programming any keys required into any radios. Alternatively, KFDs can be programmed to focus on an operation, being optimised for keying speed and accuracy.

 

*Encryption is not available on the P25 TP9135/40 portables and P25 TM9135 mobile.

More Information

Go to the Support website

for user documentation.

Read about Regulatory Compliance

Tait ensures its products meet regulatory compliance in all of its markets.

Contact Us