Click for homepage
Crypto
USA
FILL
DS-102
  
KYX-15 →
← KOI-18
  
KYK-13
Electronic Transfer Device

KYK-13 is a portable battery-powered device for the distribution of cryptographic key material — in particular Transmission Encryption Keys (TEKs) — introduced in 1976 by the US National Security Agency (NSA). The device is suitable for keys with a maximum length of 128 bits and follows the NSA'a DS-102 key transfer protocol. Also known as NSN 5810-01-026-9618.

The devices measures 130 x 63 x 35 mm and weights 338 grams (battery included). It can hold up to 6 TEKs in its internal memory, selectable with a rotary switch on the control panel. The device itself can be loaded with cryptographic keys by means of a key management systemr (KMS) or with a key tape loader like the KOI-18.

Each key has a maximum length of 128 bits, of which the last 8 bits are a checksum, 1 making it compatible with the SAVILLE algorithm, used by secure speech systems like KY-57 (VINSON), KY-99, BID/250 (Lamberton) and SINCGARS radios. 2
  

The KYK-13 was also used with a range of crypto telephones, such as the STU-II, Spendex 40, Spendex 50 (DBT), KY-68, and Elcrovox 1/4D, as well as with some (bulk) data encryptors like KG-81, KG-84 and KIV-7. The device was first introduced in 1976 and has been in service for more than 40 years, with an excellent track record and wide user acceptance, largely due to its small size, low weight and ease of use. The only real drawbacks of the device are the maximum key length of 128 bits, and the limited number (6) of keys that can be stored inside the device.

KYK-13 was succeeded by a number of newer key fillers, like CYZ-10, Secure DTD2000 System (SDS), PYQ-10, and more recently DTD-II, but they all miss the simplicity of the KYK-13. In 2009, the US Army announced the KIK-30 RASKL (Really Simple Key Loader) which is called the modern KYK-13 replacement by its manufacturer [2]. Despite that, the KYK-13 was still used in 2024.

  1. There has been some debate in the past as to the maximum length of the keys that can be stored inside the KYK-13. In some publications it is stated that it is only suitable for 90-bit keys and that later devices (e.g. the CYZ-10) had to be used for the modern 128-bit keys [1]. This can not be true however, as all crypto phones listed above use the 128-bit key based SAVILLE algorithm.
  2. Only COMSEC-enabled SINCGARS radios. For older non-COMSEC SINCGARS radios, a separate - external - voice encryption unit is required.

KYK-13 key transfer device
KYK-13 key loader
KYK-13 front view
KYK-13 top view
6.5V battery inside the KYK-13
KYK-13 installed on a KY-68
Close-up of the KYK-13 on a Spendex-40
Using a KLL-1 to transfer keys to a KYK-13
A
×
A
1 / 8
KYK-13 key transfer device
A
2 / 8
KYK-13 key loader
A
3 / 8
KYK-13 front view
A
4 / 8
KYK-13 top view
A
5 / 8
6.5V battery inside the KYK-13
A
6 / 8
KYK-13 installed on a KY-68
A
7 / 8
Close-up of the KYK-13 on a Spendex-40
A
8 / 8
Using a KLL-1 to transfer keys to a KYK-13

Compatible device on this website
AN/KOI-18 Key Tape Reader
Secure Telephone Unit
Secure Telephone Unit
Digital Subscriber Voice Terminal
Philips Spendex-40 secure telephone for voice, fax and computer
Philips Spendex-50, military secure crypto phone (a.k.a. DBT)
Elcrovox 1-4D narrow band voice and data terminal (STU-II compatible)
KY-57 (VINSON) Wide-band Voice and Data Encryption Unit
KY-99 (MINTERM) Narrow-band Voice and Data Terminal
KG-84 data encryptor
BVO-M (Mucolex compatible) Trunk Encryption Device
BVO-T (KG-81 compatible) Trunk Encryption Device
Aroflex II cipher machine, also known as PDLX-6141 or T-1285CA
KIV-7, embeddable KG-84 COMSEC module
Known compatible devices
Operation
The KYK-13 is very easy to operate and has only a few controls. There are two rotary switches (mode and address) with a recessed push button in between them (transfer). The device has two U-229 type connectors for connection to a crypto device: a male type (J1) and a female type (P1). These connectors are electrically identical and can also be used for cloning two KYK-13 devices.


At the right is the ON/OFF switch (MODE). At the left is the selector for the required crypto key compartment (1-6). The button at the center (Transfer) is used to initiate a transfer, although in most cases a transfer should be initiated from the destination device (e.g. a crypto phone). Any activity is indicated by the red LED. The unit is ZEROIZED (i.e. all keys destroyed) by setting the key compartment selector to Z ALL (ZEROIZE ALL) and turning the MODE switch to Z (ZEROIZE).

The KYK-13 is powered by a single internal 6.5V battery that is installed in a small compartment at the rear of the unit. A small aluminium panel with two screws gives access to the battery and allows it to be replaced within minutes. The image on the right shows the KYK-13 after the battery cover has been removed.

Initially, the KYK-13 was used with the Mercury-based BA-1372/U battery, which has now been superceeded by the better BA-5372/U Lithium Manganese Dioxide battery. This battery is still available today from a variety of sources.
  

The design of the KYK-13 is similar to the MX-18290 Transmission Security Key Fill Device, featuring a similar case, similar controls and identical connectors. The KYK-13 however, is much smaller and can be used for cryptographic keys, whilst the MX-18290 is only suitable for transferring Frequency Hopping tables, also known as Transmission Security Keys (TSK).

The KYK-13 is used all over the world with a variety of devices, ranging from crypto phones and similar equipment, to frequency hopping radios (FH), airplane transponders (Identification Friend or Foe, or IFF) and even GPS devices.

The KYK-13 can hold up to six keys (or key variables) in its memory, with a maximum of 128 bits for each key. Each key consists of 120 key bits (i.e. the actual key) and an 8-bit checksum. As there is no way to tell which key is used for what purpose, there are 6 writable fields on the side panel of the device, as shown in the image.
  

The six white ovals in the image above are somewhat recessed and have a plastic background, so that they can be written with a pencil. As per convention, they would generally be used to indicate the type of key and the valid crypto period. For example, if compartment #1 contains a Secure Voice key that is valid until 24 February, oval #1 could read something like: SV 24 Feb.

KYK-13 with open battery compartment
6.5V battery inside the KYK-13
Typical 6-Volt BA-5372/U battery
The KYK-13 in front of the MX-18290
B
×
B
1 / 5
KYK-13 with open battery compartment
B
2 / 5
6.5V battery inside the KYK-13
B
3 / 5
3 / 5
B
4 / 5
Typical 6-Volt BA-5372/U battery
B
5 / 5
The KYK-13 in front of the MX-18290

Examples of use
Although the KYK-13 can be connected to any DS-102 compatible device by means of a so-called fill cable, it is constructed in such a way that it can be fitted directly to the FILL connector of most crypto devices. As it has both a male-type and a female-type connector, one will always fit.

KY-68
Just as an example, the KYK-13 is shown here on top of the KY-68 military crypto phone that was used in the US Army during the 1990s. It is connected directly to the FILL connector of the KY-68, and was used for transferring various types of keys.

 More about the KY-68
  
Spendex 40
The KYK-13 was also a popular device outside the US Army. The image on the right shows a KYK-13 unit connected to a Philips Spendex-40 military-grade crypto phone. It is used here to load the Traffic Encryption Keys (TEK) into the secure telephone.

 More about Spendex 40

  

Over the years, the KYK-13 has arguably become one of the most popular fill devices of all times, because of its small size, light weight and ease of use. In fact it was so popular that it was always in short supply. It has become the standard by which all later key fillers are referenced.

Using the KYK-13 on a KY-68 crypto phone
KYK-13 installed on a KY-68
Using the KYK-13 with the Spendex-40 crypto phone
Close-up of the KYK-13 on a Spendex-40
C
×
C
1 / 4
Using the KYK-13 on a KY-68 crypto phone
C
2 / 4
KYK-13 installed on a KY-68
C
3 / 4
Using the KYK-13 with the Spendex-40 crypto phone
C
4 / 4
Close-up of the KYK-13 on a Spendex-40

Interior
The KYK-13 is a powerful yet rather simple device. It could be serviced at the depot and can be opened by removing the four bolts at the corners of the front panel. After removing the front panel, the interior becomes visible, revealing the solder side of the main Printed Circuit Board.

The Printed Circuit Board (PCB) is held in place by four small cross-head bolts and contains a connector (at the other side) that slots directly into another PCB that contains the controls.

After removing the bolts, the PCB and easily be lifted off the lower PCB. The image on the rights shows the main PCB aside the KYK-13, with its component side facing upwards.

The double-sided PCB is relatively simple and contains only a handful of components. At the lower half is the black sockets for the lower PCB.
  

The rest of the PCB contains only two critical components: the main controller (ON512432) and a static RAM memory chip (ON202178). Both chips are custom made (OEM) by Harris. The main controller is probably a custom-designed Application Specific Integrated Circuit or ASIC. Judging from the date codes on both chips, the device shown here was made in or around 1986.

Please note that neither the KYK-13 nor its documentation is classified or otherwise restricted. Only when the device is loaded with a valid key, it becomes classified to the level of the key. KYK-13 is approved by the NSA for the distribution of Type-1 cryptographic keys.

KYK-13 front view
KYK-13 interior
Solder side of the KYK-13 PCB
The main PCB removed from the KYK-13
Component side of the KYK-13 PCB
Close-up of the custom-designed ASIC
Custome-designed static memory (RAM)
KYK-13 with open battery compartment
D
×
D
1 / 8
KYK-13 front view
D
2 / 8
KYK-13 interior
D
3 / 8
Solder side of the KYK-13 PCB
D
4 / 8
The main PCB removed from the KYK-13
D
5 / 8
Component side of the KYK-13 PCB
D
6 / 8
Close-up of the custom-designed ASIC
D
7 / 8
Custome-designed static memory (RAM)
D
8 / 8
KYK-13 with open battery compartment

Clones
KSP-1
Because of its success and popularity, the KYK-13 was always in short supply, which promted several European manufacturers to come up with an alternative. One example is the KSP-1 of the German manufacturer ANT, shown here.

The device is fully compatible with the KYK-13 but has 32 key compartments rather than just 6. It is operated with three push-buttons and has a 3-digit LCD readout.

 More information

  

UP-2001
Another example is the UP-2001, shown in the image on the right, made by Philips Usfa in The Netherlands in 1990. It resembles the KYK-13 but has 40 key compartments. Instead of the second U229 connector is has a 9-pin RS-232 socket for the connection of a barcode reader.

 More information

  

Connections
FILL
At either end of the KYK-13 is a 6-pin U-229 connector. One is of the plug-type (U-283/U) and the other one is of the socket-type (GC-729). Both receptacles are connected in parallel. The female receptacle can be fitted directly to most crypto devices, but it is advised to always use the male receptacle in combination with a fill cable. Below is the pinout of the male connector, when looking into the receptacle.

  1. GND
    Ground
  2. SWG
    Switched ground (via MODE-selector)
  3. REQ
    Fill request
  4. DATA
    Fill data into KY-99
  5. CLK
    Fill clock into KY-99
  6. -
    unused
Specifications
  • Device
    Electronic transfer device (fill device)
  • Purpose
    Transfer of cryptographic keys
  • Model
    KYK-13
  • Year
    1976
  • Country
    USA
  • Developer
    NSA
  • NSN
    5810-01-026-9618
  • Designator
    ON190318
  • Classification
    Unclassified CCI
  • Interface
    DS-102
  • Key length
    128 bits (including checksum)
  • Checksum
    8-bit CRC
  • Battery
    6V, BA-1372, BA-5372
  • Dimensions
    130 × 63 × 35 mm
  • Weight
    338 g (battery included)
Documentation
  1. Operator's and Maintenance Manual for KOI-18, KYK-13 and KYX-15
    TM-11-5810-292-13&P. US Army, 31 May 1989.

  2. Instructiekaart Digitaal Beveiligd Telefoontoestel - COMSEC
    COMSEC instruction card with Spendex 50, KYK-13 and KOI-18 (Dutch).
    IK001433/2. Dutch Army, 4 April 2001.

  3. CSESD-11
    Communications Security Equipment System Document for Fill Devices

    NSA, date unknown. Unclassified parts only. #CM303091/B.
References
  1. Kathleen Hickey, DOD modernizes cryptographic device
    Defense Systems website, 12 November 2009. Retrieved May 2012.

  2. Sypris Electronics, RASKL KIK-30
    Retrieved May 2012.

  3. Enhanced Online News, Sypris Electronics Awarded Multi-Year $200 Million Contract...
    11 November 2009. Retrieved May 2012.
Further information
Any links shown in red are currently unavailable. If you like the information on this website, why not make a donation?
© Crypto Museum. Created: Thursday 31 May 2012. Last changed: Saturday, 27 April 2024 - 07:39 CET.
Click for homepage