NIA - NATO Information Assurance

Attention: the NIAPC web site may not include all approved products.The list of approved products is always changing; there is a backlog of approved products still to be added to this information portal, and there are delays in responding to queries and inclusion of new products. NATO is reviewing options to improve collaboration and provide more timely information sharing of approved security products.

TZ1001R CIFPECOM

The TZ1001R Combatant Personal Encryptor (CIFPECOM) is a tactical crypto device providing secure push-to-talk (PTT) voice and IP data communications over the combat-net radio (CNR).

The CIFPECOM was developed to meet the need for secure communications over IP radios between soldiers, vehicles and other elements deployed in a tactical environment, managing both national and international security, voice and data.

TZ1001R includes several voice encryption modes (STaC-IS 2400, TSVCIS 600, TSVCIS 1200, etc.) which are suitable for different kind of radios (HF, VHF, etc.). It also provides an IP authenticated encryption mode suitable for CNR (minimum overhead, tolerant to radio network instabilities, etc.).

TZ1001R performs a secure boot which is triggered by a Crypto Ignition Key (CIK), which is used as user authentication method and also to load the mission file including the Traffic Encryption Keys (TEKs). When the CIK is removed, the device is considered an UNCLASSIFIED CCI.

The system includes a management center (CMAP) to generate the mission files, including the configuration and the TEKs, for the different TZ1001R units deployed in a given scenario.

Additional Notes

TZ1001R can be deployed in two different modes: "tactical crypto mode" and "slave crypto mode". In tactical crypto mode the device is used as an online encryptor allocated between the user systems and the radio; therefore, one TZ1001R is needed for each radio. In slave crypto mode TZ1001R behaves as a slave element of a tactical router which manages several radios; in this mode the tactical router requests TZ1001R to encrypt/decrypt voice and/or IP data through a well establish ASN.1 ICD. Depending on the kind of radio (HF, VHF…) to be used for a given transmission, the tactical router will request TZ1001R to use the most appropriate encryption mode (TSVCIS 600, STaC-IS 2400…).

Product Images