Page 1 of 1
Default Encryption Keys (XTS3000/5000)
Posted: Tue Jun 23, 2009 5:40 pm
by billlayton
Has anybody noticed a default or standard encryption key used in Motorola 800 MHz P25 trunked systems? I heard there was a factory default. Is that true?
Tks,
Bill
Re: Default Encryption Keys (XTS3000/5000)
Posted: Tue Jun 23, 2009 7:00 pm
by Batwings21
Before a key is loaded into a encrypted radio, the key is blank. If you attempt to transmit in encrypted mode it will emit a tone and show keyfail.
Re: Default Encryption Keys (XTS3000/5000)
Posted: Tue Jun 23, 2009 7:19 pm
by MattSR
billlayton wrote:Has anybody noticed a default or standard encryption key used in Motorola 800 MHz P25 trunked systems? I heard there was a factory default. Is that true?
Tks,
Bill
No such thing.
Re: Default Encryption Keys (XTS3000/5000)
Posted: Wed Jun 24, 2009 1:45 am
by Einstein
The R2670D manual makes reference to a internal test key of 707070....hex. It states ASTRO radios also have an internal Test Key which I have not seen or have tested personally.
Re: Default Encryption Keys (XTS3000/5000)
Posted: Wed Jun 24, 2009 4:28 am
by MattSR
The modules have an internal test key that is used to test the UCMs function upon power up. A known block of input data is encrypted with a known IV (if needed) and a known key, then the result is compared to a known value. This internal key is only used for the UCM's POST routine. Its not used for encrypting traffic.
The R2760, and the T3011 manuals (and the P25 specs too) refer to test keys such as 7070... or 7575 or 75F75F etc etc. These are loaded from a conventional KVL or service monitor with the right options.
As usual just my hazy 2c.
Cheers,
Matt
Re: Default Encryption Keys (XTS3000/5000)
Posted: Wed Jun 24, 2009 6:59 am
by Einstein
The 2670D manual is some what vague in that it states, ASTRO radios have an internal TEST KEY to which is the same as the analyzer. It also states that you should refer to the service manual to see if this key can be activated in the particular radio, and if cannot it must be loaded from the KVL or service monitor. It gives the impression that the test key is already in the radio.
MattSR wrote:The modules have an internal test key that is used to test the UCMs function upon power up. A known block of input data is encrypted with a known IV (if needed) and a known key, then the result is compared to a known value. This internal key is only used for the UCM's POST routine. Its not used for encrypting traffic.
The R2760, and the T3011 manuals (and the P25 specs too) refer to test keys such as 7070... or 7575 or 75F75F etc etc. These are loaded from a conventional KVL or service monitor with the right options.
As usual just my hazy 2c.
Cheers,
Matt
Re: Default Encryption Keys (XTS3000/5000)
Posted: Wed Jun 24, 2009 3:24 pm
by MattSR
Interesting info - i've never seen it referred to in any service manuals for the XTS3000 or ASTRO Saber. The 3k service manual gives a rough overview of how the crypto module work, but it also says the UCMs are not field servicable so I doubt there would be any documentation/service manuals for them either...