Without the traffic key? Yes. Without the ukek? No. The radio has to have a key loaded to decrypt the key packets. This prevents eBay radios from being able to snag the encryption keys over the air.
All radios have to be keyloaded manually the first time (and if they drop their ukek)
Just to clarify, this is not completely correct with regard to some Motorola. Moto has a feature called "Generate Key Loss Key" which is enabled in the secure hardware general tab in CPS. If enabled, as soon as the radio is hit with a KEK from a KVL, it encrypts the KEK with itself and permanently stores it in nonvolatile memory. This double encrypted key is NOT erasable from the subscriber unit even if all keys are completely zeroed out or via tampering. Instead it is used to OTAR the KEK that is then in-turn able to OTAR the TEKs...basically you can take a radio that has been zeroed (including deleting the KEK) and successfully OTAR with a validated GKLK re-key request(IF the GKLK feature was enabled in CPS.)
...so, if someone got an ebay/second hand radio from a known source and had knowledge of the KMF profile in question, even if the radio had been zeroed but that feature was in play, a competent user could snag keys out of the air. That is a lot of "ifs" but I have personally seen a radio sold on the second hand market that got to the buyer with the codeplug fully programed from the last user and three hardware traffic keys STILL LOADED in the radio, so stranger things have happened.
[tested to work on Astro25 subscriber]
