VP8000 FIPS Keyload

[aglowgibbon]

Has anyone tried to load the VP8000 in FIPS mode? The manual says that FIPS mode is only compatible with Kenwood keyloaders, but I just wanted to get confirmation.

I'm waiting on my VP8000 to arrive and just curious.

 

[otobmark]

Don't know about FIPS3, but with that box unchecked I can load VP8000 with KDF/Shield keyloader. I think I had to modify adapter. I thought FIPS was supposed to be an agnostic standard and having KW make theirs proprietary would be a mistake.

 

[aglowgibbon]

Don't know about FIPS3, but with that box unchecked I can load VP8000 with KDF/Shield keyloader. I think I had to modify adapter. I thought FIPS was supposed to be an agnostic standard and having KW make theirs proprietary would be a mistake.

That's my thinking too. I was just curious if anyone has actually tried it yet.

 

[rowanRF]

The VP8000 is certified for FIPS 140-3 level 1. As I understand it, the checkbox in Armada is for enabling support for a FIPS 140-3 level 3 module that has yet to materialize. If it works anything like the FIPS level 3 stuff does on the Motorola KVL and APX, it will not be interoperable and will require that you purchase the Kenwood keyloader in order to load keys.

 

[aglowgibbon]

The VP8000 is certified for FIPS 140-3 level 1. As I understand it, the checkbox in Armada is for enabling support for a FIPS 140-3 level 3 module that has yet to materialize. If it works anything like the FIPS level 3 stuff does on the Motorola KVL and APX, it will not be interoperable and will require that you purchase the Kenwood keyloader in order to load keys.

So you're saying that it doesn't even have a FIPS module yet? My understanding is that the radio already was compatible with FIPS level 3.

 

[rowanRF]

It has a FIPS module, but it's a level 1 software module. Motorola has been offering something similar in the APX for years. The thing to understand is that FIPS is a security standard that goes far beyond radios. It outlines requirements that hardware/software has to meet, and the requirements get stricter the higher the level is. A radio can be compatible with the P25 keyfill standard and have a FIPS certification, but nothing about P25 requires that a radio have a FIPS certification. The FIPS certification is only there to let the buyer know that the product carries some assurances in the quality of its encryption capabilities.

 

[aglowgibbon]

It has a FIPS module, but it's a level 1 software module. Motorola has been offering something similar in the APX for years. The thing to understand is that FIPS is a security standard that goes far beyond radios. It outlines requirements that hardware/software has to meet, and the requirements get stricter the higher the level is. A radio can be compatible with the P25 keyfill standard and have a FIPS certification, but nothing about P25 requires that a radio have a FIPS certification. The FIPS certification is only there to let the buyer know that the product carries some assurances in the quality of its encryption capabilities.

I know the specs pages lists that it's FIPS level 3 compliant and pending FIPS 197. Once those are finalized, will it be a software update or just a "certification"?

I'm mainly just trying to find out if it's compatible with my KVL 3K+ in FIPS mode.

 

[rowanRF]

No idea what the final implementation of FIPS level 3 will be like in the VP8000. I can guess based on what Motorola does, but then Kenwood might do something different. FIPS mode on a KVL3000+should be fine. Been a while since I used one, but I think FIPS mode on that model only increased the security of the keyloader itself and didn't affect keyloading in any way. Just leave FIPS level 3 keyfill unchecked in Armada and you should be good. The VP8000 will operate in FIPS level 1 mode as long as you leave that box unchecked.