APX 8000 & AES encryption

[goldn_eagle]

Hey everyone! I have been using the APX CPS for a while now with the APX 8000. I think I have a pretty good understanding of the functionality. One thing I am trying to better understand is the encryption settings.


The APX8000 came with AES-256 & AES-GCM and of course, ADP.


Here is my biggest question:

Do I use Hardware or Software for secure operation, in Secure Wide, to utilize AES? I am getting conflicting answers from multiple outlets. Also, can someone give me a straight forward explanation between the two? I’ve read what’s in the manual about a dozen times and it’s still a bit confusing.


Next, how do I know that I am actually using AES in my configuration? There is no drop down option for AES and nothing to verify that it’s actually activated or engaged in a channel setting / personality.

 

[KevinC]

Hey everyone! I have been using the APX CPS for a while now with the APX 8000. I think I have a pretty good understanding of the functionality. One thing I am trying to better understand is the encryption settings.


The APX8000 came with AES-256 & AES-GCM and of course, ADP.


Here is my biggest question:

Do I use Hardware or Software for secure operation, in Secure Wide to utilize AES? I am getting conflicting answers from multiple outlets. Also, can someone give me a straight forward explanation between the two? I’ve read what’s in the manual about a dozen times and it’s still a bit confusing.


Next, how do I know that I am actually using AES in my configuration? There is no drop down option for AES and nothing to verify that it’s actually activated or engaged in a channel setting / personality.

For AES256? That requires hardware and a HW keyloader. And the display has a separate icon for AES256 vs other algos.

 

[goldn_eagle]

For AES256? That requires hardware and a HW keyloader. And the display has a separate icon for AES256 vs other algos.

So even though AES-256 and AES-GCM show up in the radio (see attached) I still need to do something else?

 

[K2NEC]

Yes you need a Key Variable Loader (KVL) device, whether OEM or something like a KFDTool

 

[goldn_eagle]

Ah, ok…so my radio is just saying it’s capable of using AES keys. I need a KVL to create the keys and use them.

 

[MTS2000des]

Unless the radio was flashed with software AES-256....

 

[nikronzo]

If you have QA06653 SW-AES in your flashcode, you can just keyload with the KFDtool from github using DLI mode via the standard progamming cable. Make sure your CKR is put into the keylist under Secure Wide in CPS first before attempting to load.

 

[goldn_eagle]

Thanks for the responses! I don’t have the SW-AES in the flashcode. I found a KVL 3000+ that will do the AES keys I need. Thanks for the help everyone!

 

[KevinC]

Unless the radio was flashed with software AES-256....

Pretty sure you still need a keyloader with that option.