Philips AROFLEX CRYPTO EQUIPMEN UA8116 Series User manual

AROFLEX
CRYPTO EQUIPMENT
UA8116 SERIES
RESTRICTED
Operating instructions
PHILIPSUSFABV
PHILIPS PHILIPS

RESTRICTED
0„e„„0 AR||Fl[K
instructions
CRYPTO EQUIPMENT
UA 8116 SERIES
PHILIPSUSFABV
Document No. 13929-E-0581
Printed in The Netherlands.
All rights strictly reserved. Reproduction or issue to third parties, in any form whatsoever, is
not permitted without the written consent of the proprietors. Philips Usfa B.V. Eindhoven, The
Netherlands, reserve the right to make modifications and improvements in their design without
prior notice.
Philips Usfa B.V. Meerenakkerweg 1 5600 MD Eindhoven The Netherlands.
Tel: [phone] Telex: 51732 USFAE NL
PHILIPS

RESTRICTED
Section 1
Section 2
Section 3
Section 4
Section 5
Contents
Description
1.1 Introduction
1.2 Applications
1.3 Cryptographic data
1.4 Operational features
1.5 Leading particulars
Operating controls
Installation
3.1 Unpacking
Installation
3.2.1 For stationary use inside a building
3.2.2 For mobile use in ships, vehicles,etc.
Mains supply
Preparation
Packing
3.2
3.3
3.4
3.5
Operating instructions: OFF-LINE operation
4.1 Introduction
Operation in Plain Text mode
Keysetting
Selection of DIRECT or INDIRECT mode
Enciphering
4.5.1 Crypto procedure
4.5.2 Enciphering: DIRECT mode
4.5.3 Enciphering: INDIRECT mode
Deciphering
4.6.1 Deciphering: DIRECT mode
4.6.2 Decipheri ng: IN DIR ECT mode
Corrections
Faults in crypto format
Figures shift
Operation with stand-alone tape equipment
5.1 Adaptor, installation
5.2 Enciphering
5.3 Deciphering
5.4 Operation with fast tape punch only
4.2
4.3
4.4
4.5
4.6
4.7
4.8
4.9
Page
1
1
1
2
2
4
11
11
11
11
11
12
12
14
15
15
15
15
18
18
18
20
23
26
26
28
30
31
32
33
33
33
34
35
RESTRICTED

RESTRICTED
Section 6 Line-connected operation
6.1 Line circuits
6.2 ComSec measures
6.3 Keysetting
6.4 Transmission of clear text
6.5 Transmission of classified text
6.6 Reception
37
37
37
38
39
39
40
Section 7 Maintenance, routine security check,
faultfinding and options.
7.1 Periodic maintenance
7.2 Routine security check
7.2.1 Keysetting
7.2.2 Preparation of auxilary tape
7.2.3 Preparation of test tape
7.2.4 Security check
7.3 Faultfinding
7.4 Options
41
41
41
41
42
44
44
46
46
Figure 1.
Figure 2.
Figure 3.
Illustrations
Mounting details
Options
Operating controls
13
47
47
RESTRICTED

RESTRICTED
Section 1 Description
1.1 Introduction AROFLEX is a compact, self-contained and highly automated com
bination of a Siemens T1000 teleprinter and a microprocessor-oriented
crypto module by Philips Usfa. It is capable of rapid encryption and
decryption, with crypto text formatted in 5-letter groups in the English
alphabet. It meets the requirements of MCM 46-72 and its operation
allows of complete adherence to the ACP-127 procedures.
Two principal modes of operation are incorporated. In the DIRECT
mode the input is processed immediately to produce the cryptogram
or deciphered message. In the INDIRECT mode the input is printed
"as entered," stored internally as crypto text, and output (as crypto
gram or deciphered message) in a second operation. The input can
therefore be monitored and, if necessary, corrected to eliminate errors.
AROFLEX is equipped with 26 separate key stores, namely 23 "normal"
key stores, 2 "special" key stores and 1 "indicator" key store. A light
weight optical tape reader and a clip-on tape punch ensure maximum
applicability, and the equipment can be supplied with appropriate
line-terminating circuitry for all types of line.
1.2 Applications AROFLEX can be employed for the following purposes:
— self-contained rapid off-line encryption and decryption
— message preparation with or without instant encryption
— on-line, real-time decryption
— line-connected transmission of previously encrypted text
— end-to-end encryption over telex, ARQ, message-switching and
circuit-switching systems, with routing indicators in clear text
and contents of the message in crypto
— as a teleprinter with all modern characteristics for transmission
and reception of clear text.
AROFLEX makes very little noise in any mode, and can be used without
soundproofing or acoustic hoods.
RESTRICTED

RESTRICTED
1.3 Cryptographic data The 26 keysetting stores (compartments) of AROFLEX can be filled
from the keying lists by means of the keyboard or tape reader; each
keysetting results in a pre-calculated check word so that an immediate
check on the correct keysetting (and hence on the correct operation of
the equipment) is provided.
Keysettings cannot be recalled after they have been inserted. Hold cells
are incorporated to prevent loss of keysetting because of power failures.
Keysettings can only be inserted after the physical INSERT key has
been turned. The 2 keysetting compartments intended for SPECAT
traffic are accessible for keysetting, encryption or decryption only
after the SPECAT key has been turned in the SPECAT lock.
The keysettings consist of the compartment address (A . . . Z), a 5-
figure indicator, 24 random characters, and the 5-letter check word.
In case of emergency, the keysettings can very rapidly be destroyed
by actuating the ZEROIZING push-button.
Each message is provided with an automatically generated random
message key which prevents overlap and allows repeated use of one
keysetting. Ample ComSec measures, such as a shunt device for clear
text, are provided to prevent the inadvertent transmission of plain
text. Fail-safe supervisory circuits result in immediate crypto alarm
in case of single or multiple component failure in essential circuits.
On-the-spot production of keysetting lists is possible.
1.4 Opera t ional fea t ures Decr y ption, wh e t her OFF- L I NE or in the li n e-conn e c ted mode, i s
entirely automatic, with automatic selection of the correct keysetting.
The crypto output, consisting of 5-letter groups in accordance with
the ACP-127 format, is always printable and conforms with the current
formatting arrangements, with automatic page numbering; the group
count is printed at the end of the cryptogram.
The crypto memory can store up to 6 pages of crypto text. Correction
of input is possible without losing cryptosynchrony.
RESTRICTED

RESTRICTED
When an operator makes a mistake in operation or procedure, ARO
FLEX gives an automatic warning signal (3 rings) and blocks the key
board and tape reader till the mistake has been corrected. The auto
matic group count, paging procedure, crypto procedure and End of
Message function, combined with the possibility of correcting the
clear text message preparation, make for a simple, versatile equipment.
The monitoring of the input is a useful feature.
The page copy of all outgoing traffic, which contains a clear indication
of the moment when enciphering was started and terminated, permits
effective control over the traffic.
The keyboard is equipped with a special key for the Message Validation
Signal (Nabla sign, figs H). It also contains an automatic Figures/Letters
shift, which comes into action when it is needed; actuation of the
"Letters" or "Figures" buttons is not necessary.
The device is equipped with a keyboard memory of 10 characters.
The "Who Are You?" and "Here Is" keys are also accommodated on
the keyboard.
The page printer is equipped with an automatic New Line function
(CR + LF) which comes into action after the typing of the 69th char
acter or 72nd character on a line, depending upon an adjustment in
the telepinter.
This New Line function is not punched or stored in the message memory
and serves solely to avoid the typing of a complete line on a single spot
if a Carriage Return or Line Feed is omitted or garbled.
RESTRICTED

RESTRICTED
1.5 Leading particulars Input
Output
Operating modes
Formatting arrangements
Height
Depth
Width
Weight
Operating temperature
range
Power supply
Power consumption
Operating speeds
Telegraph code
Keyboard; tape reader; line
Page copy; punched tape; line
Clear text on-line
Crypto off-line and crypto line-connected
Message preparation
With or without monitoring of input
Always with automatic decryption
In accordance with ACP-127, i.e.
- Format Lines 1.. .4 without counting LFs
- Format Lines 5... 11, counting LFs
- Automatic paging procedure after
every 20 lines
- Automatic termination of messages
- Maximum 6 pages
265 mm without roll of paper
320 mm with roll of paper
545 mm without roll of paper
600 mm with roll of paper
530 mm including clip-on tape punch
25 kg including tape punch
- 10° C to + 55° C
110 or 220 Vac ± 10%, 50, 60 Hz
150 VA in full operation, 40VA standby
50, 75 or 100 Baud line-connected
100 Baud off-line
ITA Code No. 2 (CCITT Alphabet No. 5)
RESTRICTED

RESTRICTED
Section 2 Operating controls
The position numbers in the first column, and in parentheses in the
text, refer to figure 3.
Pos
1
Name
LINE button
OFF-LINE button
Function
Spring-loaded button for connecting AROFLEX to the line, starting
from the standby mode.
No function in the OFF-LINE mode.
Flashing lamp inside button indicates end of paper roll.
Spring-loaded button for putting AROFLEX into the OFF-LINE
mode, starting from the standby mode. Lamp is lit when AROFLEX
is in the OFF-LINE mode.
OUT button Spring-loaded button for putting AROFLEX into the standby mode
from either the line-connected mode or the OFF-LINE mode. Lamp
inside button is lit when AROFLEX is in the line-connected mode.
PUNCH STANDBY
Spare button, to be used for telex networks etc.
Spare button, to be used for telex networks etc.
Two-position button for putting the tape punch into the standby mode
for line-connected operation so that all incoming traffic is punched
and printed.
Depressed position is the PUNCH STANDBY position.
PROCEDURE button Two-position button for starting and terminating the enciphering
process.
When the button is pushed down, the red lamp inside the button
is lit and AROFLEX is ready to carry out the crypto procedure as
described in paragraph 4.5.1.
After the crypto procedure the clear text heading of Format Lines
1 ... 4 (if required) may be put in, without counting Line Feeds.
Lit lamp denotes PROCEDURE mode.
Releasing the button terminates the enciphering process.
RESTRICTED

RESTRICTED
Pos
8
Name
PREAMBLE button
ENCI button
10 OUTPUT button
Function
Spring-loaded button for putting AROFLEX into the PREAMBLE
mode for inputting of Format Lines 5 . . .11 and, if required, Format
Lines 14 and 15 before the End of Message function. The Line Feeds
of Format Lines 5 . . .11 are counted for the paging procedure. Lit
lamp indicates PREAMBLE mode.
Spring-loaded button for selecting the enciphering function (indicated
by lit lamp).
In the DIRECT mode, printing/punching of the cryptogram begins
immediately when the ENCI button is pressed, and is terminated by
releasing the PROCEDURE button or by pushing the PREAMBLE
button (for entering Format Lines 14 and 15 in clear text) and then
releasing the PROCEDURE button to generate the EOM.
When the ENCI button is pressed in the INDIRECT mode, AROFLEX
prints ten slants (//////////) to indicate the point at which enciphering
begins. The input is printed/punched in clear text. When enciphering
in the INDIRECT mode is terminated (by releasing the PROCEDURE
button or pushing the PREAMBLE button) ten slants are printed again.
Spring-loaded button for producing the enciphered or deciphered
output prepared in the INDIRECT mode.
The lamp inside the button is lit during production of the output.
Pushing the lit button twice stops the output and starts it again at the
beginning; the 'output can be repeated as many times as required.
If the OUTPUT lamp lights during enciphering in the INDIRECT mode
(accompanied by the procedure signal and blocked keyboard) the
memory is full, and enciphering must be terminated in order not to
exceed the permitted maximum length of a cryptogram according to
ACP-127. In the DIRECT mode it is possible to continue the cryptogram
(contrary to ACP-127) to 99 complete pages; the deciphering of
such an extremely long cryptogram should also be done in the DIRECT
mode.
RESTRICTED

RESTRICTED
P o s N a m e
11 INDIRECT button
12 PLAIN button
13 CORRECTION button
14 DECI button
15 Tape punch on/off
Function
Two-position button for putting AROFLEX into the DIRECT or IN
DIRECT mode. The INDIRECT mode is selected by pushing the IN
DIRECT button and is indicated by the lit lamp. The mode of operation
must be selected before starting to encipher or decipher. When lit,
the lamp inside the INDIRECT button signifies "text in memory".
A change from INDIRECT to DIRECT or vice versa resets the memory
and extinguishes the lamp.
Two-position button for putting AROFLEX into the PLAIN text mode,
indicated by lit lamp and depressed button.
Pushing and releasing the PLAIN button clears message memory.
Spring-loaded pushbutton for character-by-character correction of:
— input in the INDIRECT DECI mode
— input in the INDIRECT ENCI mode
— input for paging information
— typed-in manual message key (see paragraph 7.4 and Figure 2)
The lamp inside this button has 3 functions:
— steady burning in the DECI mode indicates incorrect format
— slow blinking + procedure signal in the DECI mode after the
11th group indicates the "no key" condition
— fast blinking + procedure signal in any mode indicates a SPECAT
condition: the SPECAT key (22) must be inserted and turned before
the operation (keysetting, enciphering or deciphering) can proceed,
using key compartment X or Y.
Two-position pushbutton for selecting the deciphering function,
indicated by lit lamp.
Spring-loaded pushbutton for switching the tape punch on and off;
lit lamp inside the button indicates that the punch is switched on.
In the line-connected mode this control is overruled by the depressed
PUNCH STANDBY button(6).
RESTRICTED

RESTRICTED
P o s N a m e
16 Tape run out
17 Tape backspacer
18 Tape retaining catch
19 Taut-tape contact
20 Tap e r e a de r on / o ff
21 Tape read e r cover
22 SPECAT lock
Function
Spring-loaded button for punching "Letters" continuously, regardless
of operating mode or punch activation.
Spring-loaded button for backspacing the tape for correction ("let
tering out"); tape is backstepped one character when the button
is pressed firmly.
Small two-position catch under the plastic cover, used for lifting
the tape retaining pad when a new tape is being inserted; when the
catch is pressed home, the punch automatically punches approximately
20 "Letters".
Tape for reader must be passed upwards over this contact so that a
jammed tape will stop the reader.
Spring-loaded button for starting and stopping the tape reader; when
tape has been inserted and the cover (21) is closed, pressing the button
for a very short time (less than 1/4 second) will advance the tape one
character. Pressing the button for a longer time (about 1/2 second)
will make the reader step continuously. Pushing the button whilst
the reader is stepping will stop the reader.
Catch-retained cover for opening the tape reader so that a tape can
be inserted, engaging the transport holes in the sprocket wheel.
Lock for inserting and turning the physical SPECAT key for operating
with key stores X or Y.
The necessity for turning the SPECAT key is indicated by the fast
blinking of the CORRECTION lamp (13).
RESTRICTED

RESTRICTED
P o s N a m e
23 " Z e r o i z e " b u t t o n
24 INSERT lock
25 Drain indicator
26 Connector (front)
27 Connector (centre)
28 Connector (rear)
Function
Red spring-loaded button for zeroizing the key stores and crypto
memory in case of emergency.
The button must also be used for switching off the hold batteries
when AROFLEX is disconnected from the mains and the contents of
the crypto memory are to be zeroized. Pushing the button extinguishes
the drain indicator (25).
Lock for inserting and turning the physical INSERT key for key-
setting purposes.
Red light-emitting diode, lit when the "hold" batteries are being
drained to retain the contents of the key compartments and crypto
memory (for instance during interruptions in the power supply).
The fully charged hold batteries keep the memory alive for about
90 minutes. The indicator lights up as soon at the plug is pulled from
the mains. The hold batteries are switched off automatically when
the output voltage drops below a certain threshold.
The hold batteries are constantly trickle-charged as long as AROFLEX
is connected to the mains. The indicator is extinguished when the
"Zeroize" button (23) is pushed.
For connecting a stand-alone tape punch.
For connecting a stand-alone tape reader.
For connecting the warning lamp and shunt device in the line-connected
mode.
RESTRICTED

RESTRICTED 11
Section 3 Installation
3.1 Unpacking 1. Lift the insert out of the wooden transport case.
2. Lift the AROFLEX out of the box with the aid of the two ropes,
taking care that the right-hand rope does not become entangled
with the tape holder of the tape punch.
3. Remove the 4 M8 bolts and large washers from the underside
of the padded wooden baseplate.
4. Take the INSERT and SPECAT keys out of the chad container.
5. Store the packing material for future use.
3.2 Installation
3.2.1. For stationary use
inside a building
1. Place AROFLEX on the desk or table, check that the mains voltage
is 220 volts, and insert the plug into a rim-earthed socket. The lamp
inside the LINE button blinks slowly to indicate that there is no
paper roll in place.
2. If AROFLEX is to be used in the line-connected mode, terminate
the line on the 8-pole line socket.
3. Provide a secure connection to a signal ground to be connected
to the wing nut at the rear of the teleprinter, next to the tape punch.
3.2.2. For mobile use in ships
and vehicles
1. Place AROFLEX on rubber cushion on top of metal baseplate,
and secure by means of four bolt-assemblies (see figure 1).
Make sure that all rubber washers and spacers fit snugly into the
holes provided on the baseplate and the rubber cushion.
Fix the metal baseplate (mounting support) to the operating
surface by any convenient means using the holes provided for this
purpose.
RESTRICTED

12 RESTRICTED
3.3 Mains Supply The equipment is set for operation from a 220-volt, 50/60 Hz mains
supply via rim-earthed "SHUKO" sockets. A spare socket is provided
for those places where another type of mains socket is in use.
To operate AROFLEX from a 110-volt mains supply, the power supply
unit must be removed and, after opening, be adjusted for 110 volts.
To operate AROFLEX from a dc supply, a dc-to-220Vac converter
must be used.
3.4 Preparation 1. Unlock the printing-head assembly by releasing the metal latch
which locks the printing head to the rail.
2. Insert a roll of paper as shown in the diagram under the hood.
3. Put the mains plug into the socket. A relay will be heard to ener
gize; AROFLEX is now in the STANDBY mode.
An automatically switched fan controls the cooling of the power
supply unit.
4. Insert a roll of tape in the punch as shown in the diagram on the
side of the punch. Release catch (18) under the punch cover so that
the tape can be slid in easily. Snap catch (18) into position after
the tape has passed underneath it; a number of "Letters" will
be punched automatically.
5. Blinking of the LINE lamp (1) indicates that there is no paper for
the page copy or that the hood is not closed.
RESTRICTED

RESTRICTED 13
Figure 1: Mounting details
RESTRICTED

14 RESTRICTED
6. AROFLEX is switched into the OFF-LINE mode by pushing
the spring-loaded OFF-LINE button (2). The lamp inside this button
lights.
To switch AROFLEX back into the STANDBY mode, with the
contents of the memory still alive, push the OUT button (3).
All lamps will now be extinguished.
7. AROFLEX is switched off completely only when the mains supply
is switched off.
As soon as AROFLEX is switched off, the Battery Drain Indi
cator (25) lights, denoting that the hold batteries are switched on
to keep the contents of the memory alive.
The batteries can supply the memory for about 90 minutes and
are switched off automatically as soon as the battery voltage
drops below a pre-set threshold value. To stop the drain (and
consequently reset the memory to zero) push the red "zeroize"
button (23) thereby extinguishing the Battery Drain Indicator (25).
3.5 Packing As unpacking, in the reverse order. Do not forget to secure the printing-
head assembly by inserting the latch at the left side of the rail into
the notch on the printing head.
Push the red "zeroize" button (23) to make sure that the Battery Drain
Indicator ( 25) is switched off and that all memories are reset.
The baseplate can be fixed to AROFLEX when the equipment is tilted
to one side, with the punch uppermost.
RESTRICTED

RESTRICTED 15
Section 4 Operating instructions:
OFF-LINE operation
4.1. Introduction In each of the following procedures it is assumed that the operator
starts with all pushbuttons released and lamps extinguished.
A concise summary of all operating instructions is given on the AROFLEX
instruction card.
4.2. Operation in Plain Text mode 1, Push OFF-LINE button (2) and PLAIN button (12).
The lamps inside both buttons light. Text put in via the keyboard
or tape reader is printed and punched.
As long as P LA IN button (12) is pressed, any other mode of operation
is inhibited. Attempts to assume other modes of operation result
in the procedure signal only.
Mistakes in the input can be corrected by "lettering out" the wrong
characters. The tape must be backstepped the required number of
steps and the "A ... " (Letters) key actuated accordingly.
4.3. Keysetting 1. Push the OFF-LINE button (2).
2. Insert and turn the physical INSERT key in the INSERT lock (24):
AROFLEX automatically prints "INSERT" to indicate that all
compartments are available for keysetting.
3. Select the required key compartment by typing its address character
on the keyboard: A ... W for normal keys, X and Y for SPECAT
keys and Z for the indicator key for automatic enciphering/deci
phering of the serial number of the keysetting. The selected com
partment letter is printed.
RESTRICTED

16 RESTRICTED
NOTES
(1) When a SPECAT compartment (X or Y) is selected, the pro
cedure signal sounds and the CORRECTION lamp flashes
rapidly; the SPECAT key must be inserted and turned in the
SPECAT lock before proceeding with step 4.
(2) If an indicator key is stored in compartment Z, the first and
last group of each cryptogram contain the enciphered serial
number of the key used for enciphering the message. If com
partment Z is empty each cryptogram begins and ends with
the group ZZZZZ.
4. From the key list, type the 5-figure serial number of the required
key, the key itself (24 alphabetical characters) and the checkword
(5 alphabetical characters); the key is not printed. For keysetting
from punched tape, refer to step 9.
5. If all 29 alphabetical characters have been entered correctly, ARO
FLEX prints the checkword; the fact that this matches the check-
word in the key list provides a positive indication that AROFLEX
is operating properly and that the key has been inserted correctly.
6. Type a CR or LF. AROFLEX prints INSERT on a new line. Steps
3 and 4 can now be repeated for the next key.
7. If a mistake has been made during the typing of the key or check-
word, the procedure signal sounds as the 29th character is typed,
and AROFLEX prints two checkwords - the first "as typed" and
the second "as calculated". The selected compartment cannot
be used for enciphering or deciphering, and therefore Steps 3
and 4 must be repeated after typing a CR or LF. (AROFLEX
prints INSERT, and all compartments are available for keysetting;
keys previously set in other compartments are not affected.)
RESTRICTED

RESTRICTED 17
8. It is also possible to insert a key without typing the checkword.
If a CR or LF is typed after the 24th character of the key, AROFLEX
will calculate and print the checkword corresponding to the key
"as typed;" this must be checked against the required checkword as
shown on the key list. Typing another CR or LF then returns
AROFLEX to the INSERT condition as in Step 6.
9. Keys can also be inserted from punched tape; the compartment
address can be entered from the keyboard, after which the key
can be entered from the tape reader. AROFLEX prints the serial
number and checkword of the key, after which the tape reader stops.
If each key on the tape finishes with a CR or LF, the next INSERT
can be produced by restarting the tape (AROFLEX prints INSERT
and the reader stops so that the compartment address can be typed
in). If the tape does not contain CR or LF, the next INSERT must
be produced by entering CR or LF from the keyboard.
10. The checkword, key serial number or destination can be noted
on the AROFLEX tote plate, using a glass marker.
11. When key insertion is complete, remove and store the physical
INSERT and SPECAT keys. Push the OUT button (3) to put
AROFLEX into the standby condition.
12. To zeroize all keysettings instantly, push the red "zeroize" button
(23) on the front of the crypto module; this also switches off the
hold batteries.
RESTRICTED