https://urgentcomm.com/wp-content/themes/ucm_child/assets/images/logo/footer-new-logo.png
  • Home
  • News
  • Multimedia
    • Back
    • Multimedia
    • Video
    • Podcasts
    • Galleries
    • IWCE’s Video Showcase
    • Product Guides
  • Commentary
    • Back
    • Commentary
    • Urgent Matters
    • View From The Top
    • All Things IWCE
    • Legal Matters
  • Resources
    • Back
    • Resources
    • Webinars
    • White Papers
    • Reprints & Reuse
  • IWCE
    • Back
    • IWCE
    • Conference
    • Special Events
    • Exhibitor Listings
    • Premier Partners
    • Floor Plan
    • Exhibiting Information
    • Register for IWCE
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Terms of Service
    • Privacy Statement
    • Cookie Policy
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • Mission Critical Technologies
    • TU-Auto
  • In the field
    • Back
    • In the field
    • Broadband Push-to-X
    • Internet of Things
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Call Center/Command
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Network Tech
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Operations
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Regulations
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • Organizations
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
Urgent Communications
  • NEWSLETTER
  • Home
  • News
  • Multimedia
    • Back
    • Video
    • Podcasts
    • Omdia Crit Comms Circle Podcast
    • Galleries
    • IWCE’s Video Showcase
    • Product Guides
  • Commentary
    • Back
    • All Things IWCE
    • Urgent Matters
    • View From The Top
    • Legal Matters
  • Resources
    • Back
    • Webinars
    • White Papers
    • Reprints & Reuse
    • UC eZines
    • Sponsored content
  • IWCE
    • Back
    • Conference
    • Why Attend
    • Exhibitor Listing
    • Floor Plan
    • Exhibiting Information
    • Join the Event Mailing List
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Terms of Service
    • Privacy Statement
  • Related Sites
    • Back
    • American City & County
    • IWCE
    • Light Reading
    • IOT World Today
    • TU-Auto
  • newsletter
  • In the field
    • Back
    • Internet of Things
    • Broadband Push-to-X
    • Project 25
    • Public-Safety Broadband/FirstNet
    • Virtual/Augmented Reality
    • Land Mobile Radio
    • Long Term Evolution (LTE)
    • Applications
    • Drones/Robots
    • IoT/Smart X
    • Software
    • Subscriber Devices
    • Video
  • Call Center/Command
    • Back
    • Artificial Intelligence
    • NG911
    • Alerting Systems
    • Analytics
    • Dispatch/Call-taking
    • Incident Command/Situational Awareness
    • Tracking, Monitoring & Control
  • Network Tech
    • Back
    • Cybersecurity
    • Interoperability
    • LMR 100
    • LMR 200
    • Backhaul
    • Deployables
    • Power
    • Tower & Site
    • Wireless Networks
    • Coverage/Interference
    • Security
    • System Design
    • System Installation
    • System Operation
    • Test & Measurement
  • Operations
    • Back
    • Critical Infrastructure
    • Enterprise
    • Federal Government/Military
    • Public Safety
    • State & Local Government
    • Training
  • Regulations
    • Back
    • Narrowbanding
    • T-Band
    • Rebanding
    • TV White Spaces
    • None
    • Funding
    • Policy
    • Regional Coordination
    • Standards
  • Organizations
    • Back
    • AASHTO
    • APCO
    • DHS
    • DMR Association
    • ETA
    • EWA
    • FCC
    • IWCE
    • NASEMSO
    • NATE
    • NXDN Forum
    • NENA
    • NIST/PSCR
    • NPSTC
    • NTIA/FirstNet
    • P25 TIG
    • TETRA + CCA
    • UTC
acc.com

View From The Top


Commentary

Adding low-cost ADP encryption could be a pricy decision

Adding low-cost ADP encryption could be a pricy decision

By Scott Tschetter — A movement is afoot to add a proprietary encryption protocol called advanced digital privacy, or ADP, to Project 25 systems across the country. However, in so doing, users are at risk of losing federal grant funds.
  • Written by
  • 17th April 2012

Photo of Scott TschetterBy Scott Tschetter

A movement is afoot to add a proprietary encryption protocol called advanced digital privacy, or ADP, to Project 25 systems across the country. However, in so doing, users are at risk of losing federal grant funds.

It is easy to understand the appeal of adopting ADP. Most public-safety radio system administrators do not like the idea of their P25 radio systems being monitored by anyone with a $125 scanner (or worse, streamed live across the Internet). The P25 standards include 256-bit AES and DES encryption options, but these protocols can be expensive. In response, 40-bit ADP was introduced.

As far as security goes, ADP offers very little protection. With a laptop and a hacker program downloaded from the Internet, a 40-bit key can be broken in just a few hours. In contrast, the 256-bit encryption, as included in the P25 standard, would take more than a trillion years to hack — not even feasible. But ADP can be deployed at very little cost, which cash-strapped agencies might find attractive.

But while the up-front cost of ADP is basically nothing, it actually could end up being quite expensive. Here’s why:

The Department of Homeland Security, via its SAFECOM program, has included six federal grant requirements for 2012:

  • Include P25 standards in a statement of requirements
  • Select P25-eligible equipment
  • Obtain documented evidence of P25 compliance
  • Ensure compliance with the P25/AES encryption standard
  • Ensure additional features purchased are P25-compliant
  • Written justification required for non-P25 purchases

The adoption of ADP encryption clearly violates the fourth requirement and violates the spirit of the fifth requirement, as no P25 radio with ADP enabled can pass the P25 Compliance Assessment Program. What happens two years from now when DHS audits a 2012 grant awardee? If DHS determines that the agency violated these requirements (or worse, misled grant reviewers), the agency could be required to return funds and also could risk its eligibility for future funding.

Awareness of this issue was one reason why lawmakers in Ohio recently adopted new language that stipulates any state or federal funds spent on the statewide Multiagency Radio Communications System (MARCS) “may not limit interoperability in mission-critical communications.” Further the MARCS steering committee must “certify that the P25 system complies with P25 standards.”

One such advocate of this new requirement is Bob Glaser, a trustee of Beavercreek Township, Ohio. Glaser’s testimony on this issue before the state’s Senate finance committee last week played a key part in convincing lawmakers that these controls were necessary to ensure P25 interoperability, and also to avoid the risk of forfeiting grant funding.

But the original problem remains: Public safety wants secure (and private) communications. So what is a P25 system owner to do? Multiple manufacturers now are offering “single-key DES” as an alternative. In considering this option, it should be noted first that DES is a P25-recognized encryption standard. Though single-key DES provides radios with just one encryption key — it does so in a vendor-neutral, P25-compliant fashion and is still orders of magnitude stronger than ADP. And for now, this new feature is being offered for free. Sometimes you can have your cake and eat it too!

What should an agency do if it already has deployed ADP encryption? First, create non-ADP, P25 talkgroups for interoperability. Second, create a migration plan to single-key DES for talkgroups that need privacy, but not necessarily full-blown encryption. For tactical or other talkgroups that truly need encryption, investigate the cost of adopting multi-key DES or AES — it may be less than you think if it is only used for the small number of users that require this level of security.

Scott Tschetter is vice president of Eastern Communications, a land-mobile-radio dealer in Long Island City, N.Y., and is a member of Urgent Communications’ editorial advisory council.

Tags: Data Public Safety Security Commentary Project 25 Security Software View From The Top Commentary

Most Recent


  • Federal agencies infested by cyberattackers via legit remote-management systems
    It has come to light that hackers cleverly utilized two off-the-shelf remote monitoring and management systems (RMMs) to breach multiple Federal Civilian Executive Branch (FCEB) agency networks in the US last summer. On Jan. 25, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) released […]
  • How 5G is making cities safer, smarter, and more efficient
    It’s a scenario we’ve all experienced: an ambulance with a blaring siren racing against time to get a person in medical distress to a hospital through traffic. What we don’t see is 5G connectivity enabling paramedics to communicate with hospital staff via video conference and coordinate care in real-time before arriving at the emergency room. […]
  • MCPTT interworking for critical communications
    The goal of mission-critical communication systems is to minimize the response time of first responders in emergency situations across several agencies. A dedicated push-to-talk button offers an efficient mechanism that simplifies the speaker-to-listener process to a minimum. This feature is useful when coordinating large group activities and to enable the instant flow of tactical status […]
  • Self-driving cars present terrorism risk, FBI director says
    The rollout of self-driving cars could mean an increased threat of terrorist attacks. That was the alarming warning delivered during a discussion on national security at the World Economic Forum at Davos in Switzerland. While the safety benefits of autonomous vehicles (AVs) have long been touted, the need for caution was highlighted by Federal Bureau […]

Related Content

  • Adding low-cost ADP encryption could be a pricy decision
  • Adding low-cost ADP encryption could be a pricy decision
  • Adding low-cost ADP encryption could be a pricy decision
  • New Orleans-area 911 center inks multiyear APEX deal with Carbyne to replace call-handling system

Commentary


How 5G is making cities safer, smarter, and more efficient

26th January 2023

3GPP moves Release 18 freeze date to March 2024

18th January 2023

Do smart cities make safer cities?

  • 1
6th January 2023
view all

Events


UC Ezines


IWCE 2019 Wrap Up

13th May 2019
view all

Twitter


UrgentComm

AT&T FirstNet unleashes robotic dogs for emergency services dlvr.it/ShW7p8

27th January 2023
UrgentComm

Federal agencies infested by cyberattackers via legit remote-management systems dlvr.it/ShVhn3

26th January 2023
UrgentComm

How 5G is making cities safer, smarter, and more efficient dlvr.it/ShVS1h

26th January 2023
UrgentComm

MCPTT interworking for critical communications dlvr.it/ShTm3P

26th January 2023
UrgentComm

Self-driving cars present terrorism risk, FBI director says dlvr.it/ShTTHx

26th January 2023
UrgentComm

UK Home Office officially will cut ESN ties with Motorola Solutions in December dlvr.it/ShNjfN

24th January 2023
UrgentComm

Newscan: Police software vendor breach exposes personal data, raid plans dlvr.it/ShN0q2

24th January 2023
UrgentComm

RT @IWCEexpo: We're so excited about our awesome list of speakers! Today we highlight Budge Currier, a 9-1-1 Branch Manager at CAL OES, res…

24th January 2023

Newsletter

Sign up for UrgentComm’s newsletters to receive regular news and information updates about Communications and Technology.

Expert Commentary

Learn from experts about the latest technology in automation, machine-learning, big data and cybersecurity.

Business Media

Find the latest videos and media from the market leaders.

Media Kit and Advertising

Want to reach our digital and print audiences? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • American City & County
  • IWCE
  • Light Reading
  • IOT World Today
  • Mission Critical Technologies
  • TU-Auto

WORKING WITH US

  • About Us
  • Contact Us
  • Events
  • Careers

FOLLOW Urgent Comms ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.