XG-100P AES/DES

[di1uted]

Anyone able to add these to a pair of radios I have? Happy to pay for shipping and your services

 

[BMDaug]

Your regional Harris dealer should be able to add that. Multi-key AES is an expensive feature. I believe that the 100P can do single key AES, which should cost just a cent. I know the 100M supports single key but I’ve lost track of what the 100P supports. All my Harris radios came with AES and DES multi-key.

Lastly, remember that you will need an appropriate FCC license to operate encrypted. That would be a commercially licensed frequency with proper emission designators for P25. No amateur license allows you to run encrypted and none of the other radio services like frs/gmrs allow it either. Pretty sure murs does allow it, but the 100P is not type accepted for any of those three services.

-B

 

[TDR-94]

I don't believe the XG-100P supports any single key features.

 

[prcguy]

The only type acceptance needed for an amateur radio is part 15 receiver emissions, otherwise there is no type acceptance for the transmitters.

Your regional Harris dealer should be able to add that. Multi-key AES is an expensive feature. I believe that the 100P can do single key AES, which should cost just a cent. I know the 100M supports single key but I’ve lost track of what the 100P supports. All my Harris radios came with AES and DES multi-key.

Lastly, remember that you will need an appropriate FCC license to operate encrypted. That would be a commercially licensed frequency with proper emission designators for P25. No amateur license allows you to run encrypted and none of the other radio services like frs/gmrs allow it either. Pretty sure murs does allow it, but the 100P is not type accepted for any of those three services.

-B

 

[BMDaug]

The only type acceptance needed for an amateur radio is part 15 receiver emissions, otherwise there is no type acceptance for the transmitters.

Not referring to ham, which you can’t run any encryption on anyway… referring to frs, gmrs, and murs…

-B

 

[redbeard]

I don't believe the XG-100P supports any single key features.

IIRC the 100p will do Single Key AES and DES. It 100% will not do ARC4/Encryption Lite. The mobile will do Single Key AES and ARC4. In experimentation it seems as long as the radio has the code modules loaded, if it has the SK AES option it will let it do DES as well.

 

[BMDaug]

IIRC the 100p will do Single Key AES and DES. It 100% will not do ARC4/Encryption Lite. The mobile will do Single Key AES and ARC4. In experimentation it seems as long as the radio has the code modules loaded, if it has the SK AES option it will let it do DES as well.

Ya… when they say single key they mean single key… so if it has SK AES, you can do SK DES, but only one or the other at a time… literally one single key in the radio.

-B

 

[redbeard]

Ya… when they say single key they mean single key… so if it has SK AES, you can do SK DES, but only one or the other at a time… literally one single key in the radio.

-B

Yeah and if it's the mobile with Single Key AES and ARC4...you can do multiple ARC4 keys or you can do one AES key. But not both.

 

[TDR-94]

IIRC the 100p will do Single Key AES and DES. It 100% will not do ARC4/Encryption Lite. The mobile will do Single Key AES and ARC4. In experimentation it seems as long as the radio has the code modules loaded, if it has the SK AES option it will let it do DES as well.

There is no option to enter a Single-Key, AES key, in RPM and Single-Key DES is greyed out. How can you enter either into the XG-100P?

Loading a Single AES or DES key with a keyloader is not the same as the Single-Key AES or DES feature or option in RPM

 

[IFRIED91]

So the XG100P does support ARC.4 actually … it was offered by Harris in the feature catalog price listing for unity portable…

RPM just would not let u load ARC4 due to the few software issue bugs which never where addressed and they assumed since it’s not federally complainant ehh to heck with it lol

 

[redbeard]

There is no option to enter a Single-Key, AES key, in RPM and Single-Key DES is greyed out. How can you enter either into the XG-100P?

Harris Key Admin.

 

[TDR-94]

Single-Key AES and DES keys are created, assigned and then loaded into the radio with RPM. RPM doesn't allow you to create Single-Key AES or DES keys or assign them to the XG-100P.

Are you just creating a single key and loading it with Key Admin?

That's not the "Single-Key" feature option.

 

[TDR-94]

Single-Key AES is supported In RPM2, not RPM1, which doesn't support the XG-100P. Even though RPM2 requires the AES key values to be created and loaded with the L3HARRIS Keyloader or a KVL (instead of within RPM2), RPM1 DOES require Single-Key DES keys to be created, assigned, and loaded within it and RPM1 has no support for the Single-Key AES feature or any other support for the Single-Key features for the XG-100P or XG-100M.

RPM2 supports Single-Key features for the XG-100M.

 

[redbeard]

Ok I might have been confusing my 100p and 100m in my memory. I looked at some old pics and my 100m had both SK AES & DES and I think my 100p had full multikey enc. I do know I was using Key Admin to load the keys on the 100m as I did not have RPM2 at the time. And despite having both algo options it would still only take one key or the other, not one of each.

 

[TDR-94]

Ok I might have been confusing my 100p and 100m in my memory. I looked at some old pics and my 100m had both SK AES & DES and I think my 100p had full multikey enc. I do know I was using Key Admin to load the keys on the 100m as I did not have RPM2 at the time. And despite having both algo options it would still only take one key or the other, not one of each.

Yeah, with the Single-Key feature you can only have a 'single' key in the radio. Either a single AES key or a single DES key. Both would be more than a single key.

Not sure how you could have used the Single-Key feature without having RPM2 at the time. As there is no selectible option to create or assign a Single-Key DES key for the XG-100M in RPM1 and it doesn't support Single-Key AES option. That feature came about after the release of the XG-15 and XL series of radios and RPM2.

 

[redbeard]

It was loaded via Key Admin.

 

[TDR-94]

It was loaded via Key Admin.

How did you assign the key as a Single-Key in RPM1 at the time? Key Admin only creates the AES/DES keys, the Key ID, Key Number etc. for the keyloader to load into the radio. RPM assigns the key as either a Single-Key AES or Single-Key DES key to the systems, channels or talkgroups in the mission plan.

I'm still not following how you were able to create a key in Key-Admin and then assign the key as a Single-Key AES or Single-Key DES key, as per the Single-Key feature, in RPM1, for the XG-100M.

 

[BMDaug]

How did you assign the key as a Single-Key in RPM1 at the time? Key Admin only creates the AES/DES keys, the Key ID, Key Number etc. for the keyloader to load into the radio. RPM assigns the key as either a Single-Key AES or Single-Key DES key to the systems, channels or talkgroups in the mission plan.

I'm still not following how you were able to create a key in Key-Admin and then assign the key as a Single-Key AES or Single-Key DES key, as per the Single-Key feature, in RPM1, for the XG-100M.

Is it possible that as long as you assign everything to the same key number in RPM and then create a key set with only a single key, with a matching number in KeyAdmin, that it will work? All nine of my Harris radios have multi key so I can’t test this, but from a security standpoint it makes sense that this would work because if you have a master key set, you don’t want to have to maintain a personality files for your single key radios and master key sets separately for your multi key radios… also, if there is no way to use KeyAdmin for single key radios, does that mean that you can’t OTAR single key radios or load UKEKs to them at all?

I always thought being able to load a single key via rpm was significantly less secure since opening a personality in rpm doesn’t require a password. I always thought it was just a compromise to keep cost down since the radio feature is cheaper and KeyAdmin is expensive… but I thought that single key was also advantageous because if you had some radios issued to users of a large system that only needed a single encrypted TG, you could add that feature to those lesser radios for only a cent and still OTAR them… is that not so? @mmckenna @rescue161 do you guys have any insight?

-B

 

[TDR-94]

Yes, Single-Key DES as well as Single-Key-AES are very inexpensive options to multikey, but are technically a more secure option than ARC4, and as in the case of RPM1 and Single-Key DES, no seperate keyloader is required. The Single-Key DES key is created and asigned through RPM.

In the case of Single-Key AES and RPM2, Key Admin or a KVL are required to create and load the Single-Key into the radio beforehand.

If you have Multikey, there really is no need for the Single-Key options. You can create a single key with Key Admin or KVL ( if the radio has support for the KVL ) and load it into the radio, but that's not the Single-Key AES or Single-Key DES feature option and Multikey has additional benefits and features over the Single-Key feature option, some of which you already mentioned as well as other points.

 

[BigLebowski]

So the XG100P does support ARC.4 actually … it was offered by Harris in the feature catalog price listing for unity portable…

RPM just would not let u load ARC4 due to the few software issue bugs which never where addressed and they assumed since it’s not federally complainant ehh to heck with it lol

No Ira, it's not supported in the 100P. No way to load it.