DES-OFB Obsoleted and Now Replaced with AES
Posted: Mon Nov 18, 2002 7:56 pm
I understand that the current APCO 25 standard encryption protocol is now the so-called APCO P25 Type III encryption, known as "AES" (Advanced Encryption Standard). Apparently, AES is now replacing the previous APCO P25 Type II encryption, DES-OFB. APCO P25 DES-OFB encryption is incompatible with the more current AES APCO P25 encryption protocol, and the DES-OFB hardware modules must be replaced. I also understand that the AES modules are about $1200, as opposed to the DES-OFB modules, at $750.
I was just about to write a STIC-1 with Motorola for a new ASTRO Quantar P25 repeater, with DES-OFB. I was also about to change out my existing ASTRO radios' current DES-CFB modules to DES-OFB P25 modules ($750 per radio, not including labor). Same thing with the new Quantar: DES-OFB. Now, I'm being advised to go with the AES encryption, if I need to be compatible with Public Safety APCO P25 systems (which I do).
It appears that this is much more than sales hype. For instance, in optioning out an order from General Dynamics this afternoon for a new R2670 test set, the sales guy from General told me that they have had AES on this test set for some time now. He also recently went through a training update/refresher technical course with General, and they said that AES is the preferred APCO P25 standard now, and going forward.
Does anyone know the details? I assume AES is more secure? Does it use a 56 bit key, like DES-OFB did? (WEP encryption uses a 128 bit key, and I guess there are tons of programs on the Web that allow a novice to run a simple program on a PC, and it cracks 128 bit WEP encryption on 802.11b wireless systems with only 5 minutes of data monitoring.) Maybe DES has seen its last days?
Does AES capability also require that I replace my current T3011DX KVLs with the newer KVL 3000 key loaders (Ouch! $7,000 a pop)? Do I also need to replace my existing ASTRO Spectra mobiles' and ASTRO XTS portables' DES modules with the $1200 AES encryption modules?
Larry
I was just about to write a STIC-1 with Motorola for a new ASTRO Quantar P25 repeater, with DES-OFB. I was also about to change out my existing ASTRO radios' current DES-CFB modules to DES-OFB P25 modules ($750 per radio, not including labor). Same thing with the new Quantar: DES-OFB. Now, I'm being advised to go with the AES encryption, if I need to be compatible with Public Safety APCO P25 systems (which I do).
It appears that this is much more than sales hype. For instance, in optioning out an order from General Dynamics this afternoon for a new R2670 test set, the sales guy from General told me that they have had AES on this test set for some time now. He also recently went through a training update/refresher technical course with General, and they said that AES is the preferred APCO P25 standard now, and going forward.
Does anyone know the details? I assume AES is more secure? Does it use a 56 bit key, like DES-OFB did? (WEP encryption uses a 128 bit key, and I guess there are tons of programs on the Web that allow a novice to run a simple program on a PC, and it cracks 128 bit WEP encryption on 802.11b wireless systems with only 5 minutes of data monitoring.) Maybe DES has seen its last days?
Does AES capability also require that I replace my current T3011DX KVLs with the newer KVL 3000 key loaders (Ouch! $7,000 a pop)? Do I also need to replace my existing ASTRO Spectra mobiles' and ASTRO XTS portables' DES modules with the $1200 AES encryption modules?
Larry