|
FILL DS-101 DS-102
Simple Key Loader · SKL
AN/PYQ-10, also known as Simple Key Loader (SKL), is a ruggedized
portable hand-held data transfer device
– also known as a fill device –
introduced in 2005 by Sierra Nevada Corporation (SNC)
in Sparks (Nevada, USA),
as the successor to the AN/CYZ-10.
It is used by the US Armed Forces for retrieving,
storing and transferring data between compatible cryptographic devices.
It is protected by an embedded KOV-21 crytpto card and a
Datakey Crypto Ignition Key CIK [1].
|
The user interacts with the device via 12 rubber buttons and a 3.5"
TFT colour display, in combination with an inductive stylus.
It can only be operated with a (paired) Crypto Ignition Key (CIK)
that is installed behind a hinged lid
at the lower right side. Each time the device is powered up, the user
has to enter a username and password,
which have been pre-configured at an EKMS.
The image on the right shows the initial version of the PYQ-10,
which runs Windows CE on a 400 MHz StrongARM processor.
The device is powered by a rechargeable
Li-ion battery at the rear.
|
|
|
The PYQ-10 can hold a large number of various key types,
which are encrypted by the embedded KOV-21 encryption card,
in combination with a randomly generated Key Encryption Key (KEK)
that is held in the CIK (key-splitting). The keys are rendered meaningless
when the CIK is removed. In addition, the keys in memory (and CIK)
can be purged instantly by pressing the ZEROIZE button
at the top. This also works whilst the device is switched off.
Keys are loaded into a target device via the U229 connector at the top,
using the DS-101, DS-102
or RS-232 protocol/interface.
The PYQ-10 was introduced in 2005 and was still in production in 2026,
albeit in a modernised form as the PYQ-10A, which features a faster
processor, larger memory and offers much more storage space. Production of the
internal KOV-21 crypto card is guaranteed until 2030.
|
OPINION —
The name Simple Key Loader (SKL) is a bit of a misnomer.
Compared to earlier key loaders and key loaders from competitors,
the PYQ-10 is everything but simple. It takes forever to startup,
and the cluttered and non-intuitive Windows CE-based user interface is a
nightmare to operate. The 1980s-style icons are meaningless and the
text is barely readable.
Crypto Museum, March 2026
The image below provides an overview of the features of the PYQ-10.
It is shown here with its front panel facing upward. The Li-ion
battery pack is installed at the rear and is fixated with a knurled
bolt. The front panel holds 12 rubber push-buttons and a recessed
3.5 TFT LCD screen that is protected by a sealed polycarbonate lens.
An inductive stylus is stowed at either side of the screen.
The U229 fill connector for connection to a target device is
at the top of the device.
The Crypto Ignition Key (CIK) is installed behind the
sealed hinged access door at the bottom of the right side.
Also behind this lid
are mini USB-A and USB-B sockets for connection to a personal computer
(PC). It requires special software to be installed on the PC.
The device is switched on by holding down the ON/OFF button for approx.
2 seconds. After a short while a startup message should appear. The device
first checks the integrity of the keys stored in memory and then boots
into the Windows CE desktop. The user can then enter username and password.
If a correct username and password are not entered within a predetermined
time, the device shows a timeout message and locks itself.
It must then be forced to power off by holding down the power button.
In case of an emergency, the keys that are held in memory can be purged
instantly by executing the ZEROIZE procedure. By convention, this is a
2-step process. The zeroize button is located to the right of the
U229 fill connector. Shift the protective lid
to the right. This reveals a red button marked 'Z'.
Press the button to delete all keys.
Then return the protective lid to the left.
|
The image on the right shows the standard AN/PYQ-10 (C),
which forms the heart of the initial Simple Key Loader (SKL).
It is largely operated with the stylus in combination with
the touch-sensitive LCD screen. A spare stylus is kept
at the other side of the display.
Although there are several revisions of the hardware and the
software, the exterior has not changed in 20+ years.
In 2024, the PYQ-10 was replaced by the PYQ-10A, which offers
a faster processor, more RAM and more storage space.
|
|
|
The PYQ-10 uses a Crypto Ignition Key (CIK) in the form of the
small plastic token shown on the right. It is used
to store the randomly generated Local Key Encryption Key (LKEK)
that is used by the KOV-21 crypto card
to encrypt the cryptographic keys in the device's memory.
The CIK contains a EEPROM with an SPI interface.
It has 8 contacts at either side and can be inserted either way around.
Once initialised, the CIK is paired with the PYQ-10.
Without the CIK the stored keys are useless.
|
|
|
The PYQ-10 is supplied with two rechargeable Li-ion batteries.
The image on the right shows the standard battery, which has a
capacity of 27 Wh. It is the thinner of the two and should last
for more than 6 hours of continuous operation.
The battery should be installed at the rear of the PYQ-10
and is locked in place by fastening the knurled bolt at one
of the short sides. It can be charged with the supplied
battery charger.
|
|
|
Also supplied with the kit is a heavy duty battery with
a capacity of 49 Wh, almost double the capacity of the
standard battery. It is approx. twice as thick as the
standard battery. It should last for more than 12 hours
of continuous operation.
Like the standard battery, the heavy duty one can also be
charged with the supplied battery charger.
|
|
|
Both battery types can be recharged with the supplied
battery charger shown in the image on the right.
The battery should be 'hinged' into the charger
and then fastened with the knurled bolt.
The battery charger should be connected to the mains
via the supplied mains adapter (below).
When a battery is installed, an orange LED will come on.
Once the battery is full, the LED turns green.
|
|
|
A standard (Chinese) mains power adapter is supplied with the
kit. One side should be connected to the battery charger,
whilst the other side is connected to the mains.
The adapter is suitable for all mains voltages between
100 and 240V AC. It produces a voltage of 12V DC
and has its (+) terminal connected to the centre contact of the
circular plug.
|
|
|
A USB adapter is provided to convert the mini-USB-B socket
into a regular USB-A socket. It allows a memory stick to be
connected for external storage, in which case the PYQ-10 will
act as a host.
Note that the USB interface is not available until the user
has successfully logged on to the device.
The other USB socket (mini-USB-A) is for connection to a regular PC,
in which case the PYQ-10 will act as a device.
|
|
|
The PYQ-10 is supplied with the small 43-page A6-size booklet
shown in the image on the right.
It contains a quick reference guide; in this case for UAS version 5.0,
dated November 2008.
Further information, including a detailed technical manual, is available
from the Documentation section below.
➤ Further documentation
|
|
|
Device Fill device Purpose Transferring keys and other data between cryptographic devices Model AN/PYQ-10 Name Simple Key Loader (SKL) Manufacturer Sierra Nevada Corporation Year 2005 Country USA NSN 5810-01-517-3587 LIN C05002 Predecessor AN/CYZ-10 Successor AN/PYQ-10A, Secure DTD-2000 System (SDS), KIK-20 Users US Army, NATO Hardware v2.1 SKL UAS v7.5 Encryption KOV-21 CIK Datakey SlimLine memory token, ON686180-1 Processor 32-bit Intel XScale (400 MHz) OS Windows CE ROM 98 Flash RAM 64 MB SDRAM 64 MB Display 3.5" Transflective TFT LCD, NVG (8-bit), stylus Interfaces USB, VGA (optional), U-229 (DS-101, DS-102, CIRS232), CIK Power Battery pack 27Wh or 49Wh Li-Ion (optional mains adapter) EMI/EMC MIL-STD-461E Temperature -30°C to 70°C Humidity 10-100% Dimensions 189 × 108 × 57 mm Weight 641 g Price USD 1695 (May 2005), USD 1708 (FY07) Quantity 24,000 (2005-2007)
|
Device Fill device Purpose Transferring keys and other data between cryptographic devices Model AN/PYQ-10A Version 3.2 Name Simple Key Loader (SKL) Manufacturer Sierra Nevada Corporation Year ? Country USA NSN 5810-01-644-4375 LIN C05002 Predecessor AN/CYZ-10, PYQ-10 Successor Secure DTD-2000 System (SDS), KIK-20 Users US Army, NATO Encryption KOV-21 CIK Datakey SlimLine memory token, ON686180-1 Processor Digital Media Processor (800 MHz) OS Windows CE 6.0 ROM 32 GB Flash RAM 256 MB SDRAM 64 MB Display 3.5" Transflective TFT LCD, 800:1, 85° viewing angle, touch, stylus Interfaces USB mini-A, USB mini-B, U-229 (DS-101, DS-102, RS232), CIK Power Battery pack 27Wh or 49Wh Li-Ion (optional mains adapter) EMI/EMC MIL-STD-461E Temperature -30°C to 60°C Storage -30°C to 71°C Humidity 95% ±5%, MIL-STD-810G Dimensions 189 × 108 × 57 mm Weight 641 g Price USD 1695 (May 2005), USD 1708 (FY07) Quantity 380,000 + (2024)
|
- Removable CIK
- Embedded crypto card
- Anti-tamper design
- Red/Black separation (memory)
|
 |
|
Interface/protocol emulations
|
|
|
- Soft carrying case
- Alternative battery pack for 8 AA-size cells
|
- Quick Reference Guide AN/PYQ-10 (C)
Simple Key Loader (SKL) UAS v5.0.
November 2008.
- Technical Manual for AN/PYQ-10 (C)
TM 11-7010-354-12&P. US Army, 15 September 2005. Unclassified, FOUO.
Superceeded by [C].
- Technical Manual for AN/PYQ-10 (C)
Simple Key Loader (SKL) UAS v4.0.
TM 11-5810-410-13&P. US Army, 1 September 2007. Unclassified, FOUO.
- SKL (Simple Key Loader), Instruction Guide
US Air Force. No date. FOUO.
- Leaflet, AN/PYQ-10A (C), SKL v3.2
SNC, 30 July 2024.
- Leaflet, SKL Accessories
SNC, 30 July 2024.
|
|
