Click for homepage
Ascom
Crypto AG
Crypto
Voice
  
CRYPTOVOX →
  
SE-160
Handheld radio with voice encryption · CRYPTOVOX

The SE-160 is a half-duplex handheld FM/PM radio, manufactured by ASCOM in Switzerland around 1992 and sold by a wide variety of companies, including ASCOM, Bosch, Motorola and Crypto AG (Hagelin). The radios operate in the VHF-L, VHF-H or UHF band. Some versions have built-in voice encryption made by Crypto AG, which is implemented as an embedded chip.

The SE160 is a rugged radio set in a die-cast aluminium enclosure that was very popular with fire brigades, safety personnel, security services and special law enforcement units. In the latter case, strong digital encryption was required.

The radio was available in a variety of colours, including grey, black, red, yellow and orange. The standard version featured analogue speech. Due to the open processor concept, it could easily be adapted for a variety of existing and new networks, including trunking networks like SpeedCom, Actionet, Regionet and Traxys [2].
  
Operating the Bosch SE-160

The image above shows a typical SE-160 in a bright grey enclosure. The version shown here was marketed by the German company Bosch GmbH, and features strong digital encryption provided by Crypto AG (Hagelin). It was used for many years by an undisclosed law enforcement agency in the Netherlands. The SE-160 was first introduced in 1992 and was in production until the mid-2000s. 1 The price of a single crypto-enabled unit in 1997, was NLG 8475 (approx. EUR 3850).

The radio is compatible with the SE-660 mobile radio, that could be fitted with the same voice encryption unit. In 1996, the radio division of Ascom was first taken over by Bosch and then, in 1997, by Motorola who shut the whole operation down after consolidating the trunking market. It has meanwhile been confirmed that in most cases the encryption unit was backdoored [5][6][7].

  1. According to Oppermann Telekom in Germany [3], the SE-160 was discontinued in 2000, but from recovered invoices we know that they were ordered from the factory until at least 2003 [4].

Operating the Bosch SE-160
Ascom SE-160
Bosch SE-160
SE-160
SE-160 rear view
PK-160 programming cable
HM-160 hand microphone/speaker
Single-unit desktop charger LA-140/160
A
×
A
1 / 8
Operating the Bosch SE-160
A
2 / 8
Ascom SE-160
A
3 / 8
Bosch SE-160
A
4 / 8
SE-160
A
5 / 8
SE-160 rear view
A
6 / 8
PK-160 programming cable
A
7 / 8
HM-160 hand microphone/speaker
A
8 / 8
Single-unit desktop charger LA-140/160

Features
The diagram below shows the layout of a typical SE-160 handheld radio as seen from the top left. The version shown here is for the UHF band (430-470 MHz) and is fitted with a ¼λ antenna. User interaction is via the clear LCD screen and the 16-button rubber keypad at the front of the radio. The battery is attached at the bottom and can be charged in-situ by placing the radio straight up in a suitable desktop charger of which two variants were available: a single one and a 6-slot one.

Click to see more

The radio is operated with the push-to-talk (PTT) switch at the left side, and several additional buttons at the left and at the top of the radio. The button at the top left is marked with a red dot and is used for sending a distress signal (emergency). The button closest to the antenna is the ON/OFF switch. The function of the other buttons is programmable. With the radio shown here, the buttons I and II are programmed to duplicate the volume up and down buttons of the keypad.


The display consists of three areas. At the top row is a fixed set of 10 icons, each of which indicates a specific condition. At the center is a 9-character matrix display with a text line that usually shows the number and/or name of the current channel. The row at the bottom holds four black context-dependent squares that indicate the function of the F-keys just below the display. Depending on the model and software variant of the radio, different letters may be shown here.

  1. Receive
  2. Transmit
  3. Speaker on (tone squelch off)
  4. Call waiting
  5. Battery empty
  6. Scanning
  7. Encrypted
  8. Keypad locked
  9. Crypto default
  10. Shift (additional features)
Note that, depending on the model and software variant, some features may not be available. On the SE-160C version featured here, the ON/OFF button also acts as the Shift-key. Pressing it briefly, engages or disengages the shift-function. Pressing it longer switches the radio OFF.

Trunking version keypad
Trunking version (left) and crypto version (right)
Right side
Peripheral socket
Operating the Bosch SE-160
Antenna and screw-mount base
B
×
B
1 / 6
Trunking version keypad
B
2 / 6
Trunking version (left) and crypto version (right)
B
3 / 6
Right side
B
4 / 6
Peripheral socket
B
5 / 6
Operating the Bosch SE-160
B
6 / 6
Antenna and screw-mount base

 Operating instructions
Models
The SE-160 was available in the following basic versions, all of which could be supplied in the available frequency bands, with a variety of options and further variations, in a number of different colours. For a complete overview, check out the model number decoder.

  • SE-160 - Standard
    This is the standard device with no additional features. It is available in all frequency variants and can be programmed with the IPP-160 software.

  • SE-160T - Trunking
    The T-version was made especially for use on trunking radio networks, such as Actionet, SpeedCom, Regionet, Chekker and Traxys. The hardware is identical to that of the standard version, but the firmware and the front panel are different.

  • SE-160X - Safety
    The X-version is nearly identical to the standard and trunking models, but is explosion-safe and has a maximum power output of 1 Watt. It is intended for use in harsh and dangerous environments.

  • SE-160C - Crypto
    This is the crypto-version of the SE-160. It is different from the other models, in that it has an Audio/Digital board with integrated HC-3400 voice encryption module. The dimensions of this version are identical however. The data transfer rate is 9600 baud.

  • SE-160E - Enlarged
    An enlarged version was developed especially for use by railway organisations, like the Swiss Federal Railways (SBB) and its Austrian counterpart ÖBB. The device is much bigger than a standard one and should be carried on the chest. The display is placed at the top, rather than at the front.  Description of the SE-160E (off-site)
Compatible devices
Ascom SE-660 mobile radio with Cryptovox voice encryption
Semi-portable SE-580 radio with Cryptovox voice encryption
Semi-portable CSE-580 radio with Cryptovox voice encryption
Bands
The SE-160 was available in the following frequency band variants:

  • VHF-L 1
    68 - 88 MHz
  • VHF-H
    138 - 174 MHz
  • UHF
    400 - 470 MHz
  1. In Motorola terminology the VHF-L band is known as MIDBAND or VHF/M.

Trunking   SE-160T
For advanced and (digitally) controlled analogue radio networks, a trunking version of the SE-160 was available, known as the SE-160T. The hardware of the trunking version was identical to that of the standard version of the SE-160, with the exception of the keypad which is shown below.

Due to a flexible and open processor concept, the radio could easily be adapted for existing and new trunking networks, like SpeedCom, Actionet, Regionet, Chekker and Traxys. Extra features and protocols could be added by using Ascom's proprietary macro-based programming language that was available separately.

The image on the right shows the keypad of the SE-160T. As most trunking networks were capable of patching standard phone calls, the keypad resembles that of a standard telephone set, with four additional buttons at the left.
  
Trunking version keypad

Generally speaking, trunking-capable radios can not be used for direct communication without the presence of the underlying network. This makes these radios less interesting for HAM radio and other use. However, as the SE-160T is identical to the standard (analogue) version of the radio, except for the firmware, it should be possible to reload the radio with standard software and use it as a non-trunking radio. Some radio HAMs seem to have succeeded in doing this.

SE-160T (trunking)
HF board inside the SE-160T
Interior of the SE-160T (reverse side)
Processor board (rear side)
Processor board (front side)
C
×
C
1 / 5
SE-160T (trunking)
C
2 / 5
HF board inside the SE-160T
C
3 / 5
Interior of the SE-160T (reverse side)
C
4 / 5
Processor board (rear side)
C
5 / 5
Processor board (front side)

Speech encryption   SE-160C
Some versions of the SE-160 feature digital voice encryption, also known as Cryptovox® , which is supplied by Crypto AG (Hagelin) in Zug (Switzerland) as an embedded chip, marked HC-34xx. It was marketed by Crypto AG as Cryptovox SE-160 and was compatible with the SE-580 1 [2]. Compared to competing systems, the Swiss Cryptovox technology offers superior audio quality.

Note that the crypto unit is only present if the model number of the radio has the letter 'C' at the end. Radios that are fitted with the crypto unit are not larger or thicker than the non-crypto variant, simply because the crypto-chip is part of the Digital/AF board and can be omitted.

In the radio featured on this page, the crypto-chip carries the designator HC-3452, which means that it is probably a special (customised) variant of Crypto AG's proprietary HC-3400 encryption algorithm. This is usually done to avoid crypto-compatibily between customers.
  
Crypto unit (HC-3452) made by Crypto AG

Up to 3 x 8 cryptographic keys can be entered by means of a KED-3400 key entry device. Each key can be assigned to a specific radio channel, and consists of three parts: a past key, a current key and a future key. This allows automatic key selection when one of the parties switches from a current to a future key. When in secure mode (i.e. crypto-enabled), digital voice data is sent at 9600 baud. The HC-3400 crypto-logic is of the same generation as Crypto AG's HC-3300 phone.

The SE-160C was the successor to the secure version of the SE-20 handheld radio, manufactured by Ascom's predecessor Autophon. Contrary to the SE-160 however, the SE-20 does not provide real voice encryption, but instead features a variant of Vericrypt; a time-domain voice scrambler made by Brown Boveri and Company (BBC). This means that the SE-20 is inherently insecure.

  1. The SE-580 was Crypto AG's variant of the Nokia Mobira RD-58 portable radio, which was used in many countries for the first generations of analogue mobile phones and trunking radio networks.

Accessories
  • Standard 600 mAh battery
  • Extended capacity battery 1000 mAh
  • Hand microphone
  • Single desktop charger
  • Single desktop charger (later model)
  • 6-radio desktop charger
  • Car mounting bracket
  • LT-160/600
    Leather carrying case (standard)
  • LT-160/1000
    Leather carrying case (long, for extended battery)
  • Key loader for crypto-version
  • Test box for service engineers
NiCd batteries
Battery chargers
6-radio gang charger
External microphone/speaker
Mic
Flexible antennas
Car mounting bracket
Leather carrying case
Programming cable
RF test cable for connection of an enternal antenna
Cable for cloning the data of an SE-160
Programming software
Crypto key loader
PAG-160 Test box for service technicians
Batteries   AK-160
Different rechargeable NiCd and NiMH batteries were available for the SE-160. The initial one had a capacity of just 600 mAh, but this was later enhanced to 700 mAh. Later batteries were slightly longer and offered extended capacities of 1000, 1200, 1400 or even 2700 mAh.

All battery types can be charged with the same desktop charger, which may have to be modified in order to support the higher capacities. A small internal SMD resistor informs the charger of the battery's capacity. Note that the longer batteries require a different leather carrying case.
  
Battery

Battery charger   LA-140/160
Several battery chargers were available for the SE-160. Users had the choice between a single desktop charger, such as the one shown in the image below, or a large one that could charge 6 radios simultaneously. All chargers were available in various colours including grey and black.

The image on the right shows the standard LA-140/160 that was suitable for charging a single SE-140 or SE-160 handheld radio. The charger has four coloured LEDs at its sloped front panel, that show the status of the current charge cycle and the condition of the battery. If the bottom LED in ON, the battery has to be replaced.

Note that not all LA-140/160 chargers are suitable for all battery types. Early versions are only capable of charging 700 and 1000 mAh NiCd batteries and not the later ones with capacities of 1400 or 1700 mAh, or even more.
  
Single-unit desktop charger LA-140/160

At least two variants of the single charger were available, both of which were suitable for the SE-160 and its smaller predecessor the SE-140. The one shown above is the LA-140/160, but there was also the later LM-140/160, shown below, which has a different discharge/charge program.

The LM-140/160 is suitable for larger battery capacities up to 2700 mAh, and can also handle the newer NiMH battery technology. In addition, some of the earlier LA-140/160 chargers were modified by the manufacturer, so that they could handle larger batteries and newer technologies.

Both types of desktop chargers are suitable for thin batteries, such as the standard ones used with the SE-140 radio, and thicker ones, such as the expanded capacity battery for the SE-140 and the standard battery for the SE-160, by installing the appropriate insert inside the bay.
  
Click to see more

in case the battery doesn't fit, an alternative insert is usually stored at the bottom of the charger. It can easily be swapped. Inside each battery is a small resistor of a specific value, that identifies its capacity. By measuring this resistor, via the contact pads at the rear of the battery, the charger knows which battery is installed and can adapt its charge/recondition program accordingly.

Gang charger   LA-140/160S6R
Multiple batteries or multiple handheld radios could also be charged in the six-fold LA-140/160S6R shown in the image on the right. The unit has a built-in mains power supply unit and can be connected directly to the AC mains.

Four LEDs show the status of each individual battery, in the same way as the single PSUs described above. Once the battery is fully charged, the upper (green) LED should be lit. If the lowest LED (!) lights up continuously, the battery is broken and should be replaced.
  
6-unit gang battery charger

Microphone/speaker   HM-160
The optional external microphone/speaker MH-160 can be connected to the peripheral socket at the right side of the SE-160. It has two buttons: the push-to-talk (PTT) switch at the top and a programmable one at the left.

At the bottom of the microphone, to the left of the coiled cable, is a 3 mm socket for a regular earpiece.
  
HM-160 hand microphone/speaker

Antenna
Depending on the frequency band in which the radio operates, either a flexible whip antenna (UHF) or a rubber helical antenna (VHF) is used.

In the image on the right, the middle one is the flexible ¼λ antenna that was supplied with the UHF version of the SE-160 that is featured on this page. The one at the left is similar, but has a TNC base which was needed for certain variants.
  
Different antennas

Car mounting bracket   EH-160
It was possible to use the SE-160 as a mobile transceiver, by using the EH-160 mounting bracket. This plastic bracket could be mounted in a convenient place inside a vehicle, and was connected to the 12V DC power of the car's battery and to an external antenna.

Any peripherals, such as an external microphone/speaker, were connected to the mounting bracket, rather than to the radio.
  
EH-160 car bracket for SE-160

Carrying case
A leather carrying case could be used for carrying the SE-160 around the neck or attached to a belt. Two variants were available: a standard one, and a slightly longer one that allowed the extended battery to be used.

No image available
  

RF cable
In situation where the SE-160 has to be used temporarily from inside a car, this adapter allows the connection of an external antenna.

This cable is also used for test purposes, and allows the output power of the radio to be measured accurately when alligning the radio.
An alternative to this cable is the PAG-160 test box, that has this functionality integrated with its test connector.
  
RF test cable for external antenna

Cloning cable
When the cloning function of the SE-160 is enabled, this cloning cable can be used to transfer the frequency tables and settings to another SE-160 unit.

In order to control this feature, it has to be enabled with the IPP-160 software, after which the user can access it in setup menu 3.
  
Cloning cable

Programming cable   PK-160
Programming and loading of frequencies and cryptographic keys was done with a regular DOS PC with the IPP-160 software (see below), in combination with the special programming cable shown in the image below. Without this special cable, programming of the SE-160 radio is not possible.

One end of the programming cable is attached to the peripheral socket of the SE-160, whilst the other end should be connected to the LPT (parallel) printer port of an old MSDOS PC.

The large rectangular connector at the side of the computer contains a complex circuit with some customised components, and can not be copied easily. It is basically a small computer platform, with a Hitachi industrial processor at its heart, that converts the parallel port of the PC into a bidirectional IIC port, which is used for communication with the SE-160's processor.
  
PK-160 programming cable

Programming software   IPP-160
Programming of the SE-160 is done with the special Interactive Parameter Programming (IPP) software, IPP-160, running on an old MSDOS computer with a parallel port. It does not run under Windows. The software allows channels, frequencies, CTCSS, special tones, cryptographic keys, etc. to be stored inside the SE-160.

In addition, the software features a so-called MACRO language, in which the radio's behavior can be programmed freely. This allows the radio to be adapted for virtually any application.
  
Good example of a Toshiba 486 laptop

Key Entry Device   KED-3400
The crypto-enabled version of the SE-160, features the HC-3400 embedded crypto chip, developed around 1992 by Crypto AG (Hagelin) in Zug (Switzerland). The HC-3400 provides professional digital speech encryption with a 128-bit key and an excellent audio quality.

Crypto keys are generated and distributed by means of the KED-3400 Key Entry Device shown in the image on the right. It can also be used to enter keys manually, using a 3-KEY strategy.

 More information

  
KED 3400 key entry device

Test unit   PAG-160
Programming of the frequencies and features of the SE-160 radio is fully under control of the Interactive Parameter Programming software IPP-160, in combination with a special programming cable, of which one side connects to the 6-pin accessory socket at the side of the SE-160, and the other side to the parallel port of a standard DOS PC. The cable contains an IIC interface.

Especially for Ascom dealers and service centres, Ascom developed the PAG-160 test box, shown in the image on the right. The box has a fixed cable with an accessory plug at the end, that can be fitted directly to the socket at the side.

At the other side of the box is a 9-pin sub-D socket to which the programming cable can be connected. The programming cable should be connected to the parallel port of an old DOS PC that runs the IPP-160 programming software. Once installed between the PC and the radio, the software can be used to program all features.
  
PAG-160 test box

The PAG-160 has several switches for direct control of some functions of the SE-160, such as the squelch, the push-to-talk switch (PTT), the microphone and the speaker. It has a small built-in speaker, and a socket for a microphone at the rear. At the rear are also some test sockets.

Battery
Battery
Single-unit desktop charger LA-140/160
Insert for thin SE-140 batteries installed
Alternative insert stored at the bottom of the charger
External microphone
HM-160 hand microphone/speaker
Operating the HM-160 microphone
Connecting the microphone to the peripheral socket
PK-160 programming cable
PK-160 programming cable
PK-160 programming cable
PK-160 interior - top view
PK-160 interior - bottom view
PAG-160 test box
Rear side of the PAG-160
D
×
D
1 / 16
Battery
D
2 / 16
Battery
D
3 / 16
Single-unit desktop charger LA-140/160
D
4 / 16
Insert for thin SE-140 batteries installed
D
5 / 16
Alternative insert stored at the bottom of the charger
D
6 / 16
External microphone
D
7 / 16
HM-160 hand microphone/speaker
D
8 / 16
Operating the HM-160 microphone
D
9 / 16
Connecting the microphone to the peripheral socket
D
10 / 16
PK-160 programming cable
D
11 / 16
PK-160 programming cable
D
12 / 16
PK-160 programming cable
D
13 / 16
PK-160 interior - top view
D
14 / 16
PK-160 interior - bottom view
D
15 / 16
PAG-160 test box
D
16 / 16
Rear side of the PAG-160

Interior
The interior of the SE-160 can be accessed easily by removing four torx bolts from the corners of the rear panel of the device. This allows both the rear panel and the front panel to be removed. When doing so, be careful not to damage the rubber gaskets that make the radio water resistant.

After removing the rear panel, the HF board is exposed. It holds various oscillators, a Power Amplifier module and the actual transceiver which is housed in a shielded sub-assembly.

The front half of the radio contains the digital and audio parts as shown in the image on the right. At the left is the control board that is mounted inside the front panel. It provides the I/O for the keypad, the LCD display, the speaker and the microphone. It is connected to the rest of the radio by means of a 7-wire flexible PCB, which carries audio and digital control signals.
  
Interior - front view

Inside the actual body of the radio is the digital board, which is by far the most complex part. It has components on both sides and connects to the rest of the radio via two pin-headers at the sides and can be removed by releasing two screws and pulling the plastic strip at the bottom.

The top side of the board contains a Philips custom chip, and AMS codec and the real-time clock (RTC). The large chip in the bottom left corner is the embedded crypto unit, which was manufactured by the Swiss company Crypto AG.

It provides true digital voice encryption, based on Crypto AG's HC-3400 embedded encryptor which can be adapted freely to the customer's requirements. The exact details of the speech encryption algorithm are currently unknown, but it is probably a self-synchronising stream cipher, like an autoclave, based on NLFSR 1 technology.
  
Digital board (top)

The bottom side of the digital board contains the actual microcontroller, RAM, ROM, flash memory and several custom chips that were made especially for Ascom Radiocom AG. All boards are built to the highest quality standards of the early 1990s and contain first-class components.

  1. NLFSR = Nonlinear feedback shift register  Wikipedia

Radio body - rear view
Interior - rear view
Interior (rear) - HF board
Interior - front view
Digital board (top)
Digital board (bottom)
Control board
Crypto unit (HC-3452) made by Crypto AG
E
×
E
1 / 8
Radio body - rear view
E
2 / 8
Interior - rear view
E
3 / 8
Interior (rear) - HF board
E
4 / 8
Interior - front view
E
5 / 8
Digital board (top)
E
6 / 8
Digital board (bottom)
E
7 / 8
Control board
E
8 / 8
Crypto unit (HC-3452) made by Crypto AG

Restoration
Generally speaking, Ascom radios last very long and will hardly ever need repairing. Restoring a surviving device is therefore relatively simple, but there are some potential problems, such as the batteries which are likely to be exhausted after so many years, and are likely to be beyond repair.

Although it might be possible to find suitable aftermarket batteries on the internet, the age and condition of such batteries is often unknown and in most cases the seller gives no warranty.

If you have access to an old worn-out battery it may be worth spending some time with it to see if it can be re-used. In most cases the plastic enclosure of the battery is glued together or welded ultrasonically. In such cases it is possible to open the enclosure by means of a small saw. The image on the right shows an opened battery of which this NiCd cells have been removed.
  
Original battery opened and cleared-out

Removing the contents of an old battery, and in particular the sticky gum that keeps the batteries together, is a time consuming task, but it is doable. When doing so, be careful not to damage the small green PCB that is located at the bottom left. Once empty, the battery case can be used to accomodate fresh new rechargeable cells, or a socket to allow connection to an external source.

 Battery circuit diagram

Original battery opened and cleared-out
Emptied original battery
Small PCB inside the battery
F
×
F
1 / 3
Original battery opened and cleared-out
F
2 / 3
Emptied original battery
F
3 / 3
Small PCB inside the battery

Model number
The model number is printed on a label at the back of the radio and always starts with the model number: SE 160. The meaning of the remaining parts is given in the diagram below, based on the model number of the radio that is featured on this page. It is constructed as follows [3]:


Use the tables below to decode the actual digits found at the rear of the radio. In our case, the radio covers the 430 to 470 MHz band (46) with a channel spacing of 20/25 kHz (2). It has an output power of 2.5 Watts (2) and features build-in voice encryption (C). Details about the encryption variant and the digital protocol (if any), are usually provided on a separate label.

Frequency band
  • 08
    68-88 MHz
  • 14
    132-148 MHz
  • 16
    146-174 MHz
  • 42
    400-425 MHz
  • 43
    400-440 MHz
  • 45
    425-450 MHz
  • 46
    430-470 MHz
  • 47
    450-470 MHz
TX power
  • 0
    Driver only
  • 1
    1 W
  • 2
    2.5 W
Channel spacing
  • 1
    12.5 kHz
  • 2
    20/25 kHz
  • 3
    25 kHz
  • 5
    50 kHz
Version
  • S
    Standard
  • E
    SBB 1 with keyboard
  • C
    Crypto
  • D
    Digital
  • T
    Trunking
  • X
    Eplosion safe variant (EEX)
Variants
  • CT
    Crypto Trunking
  • DT
    Digital Trunking
  • EC
    SBB 1 with keyboard and Crypto
  • ET
    SBB 1 with keyboard and Trunking
  • TX
    Trunking and EEx (147-156 MHz) 2
  • Seco
    Standard and low-grade
  • Teco
    Trunking and low-grade
  • TXeco
    Trunking and Ex and low-grade
  1. SBB = Schweizerische Bundesbahnen (Swiss Federal Railways).
  2. Sold in the Netherlands by PTT Telecom as the Efcyvox P400 (= SE160-431-1-TX).

Connections
Peripheral socket
  1. VBAS
    Battery voltage
  2. GND
    Ground
  3. ZDA
    IIC bus data (SDA)
  4. ZCL
    IIC bus clock (SCL)
  5. ZNF
    Audio (bi-directional), external ON/OFF
  6. RSF
    Status 1
  1. input: programming voltage for flash, output: voltage for mike

Battery
Each rechargeable battery pack has four metal contacts at its rear side. When the (radio with) battery is placed in the desktop charger, these contacts are used to charge the battery and to monitor it whilst it is being charged. A PTC resistor inside the battery pack is sensed by the charger to prevent the battery from overheating. The battery connections are as follows:

Connections as seen from the rear side of the battery

The diagram below shows how the parts inside the battery pack are connected. Inside the pack is a small SMD resistor that is used by the charger to identify the battery type. In this case a 450Ω resistor is present, indicating that the 7.5V/1400mAh AK160 S1400 R battery is used.

Internal circuit of the AK160 S1400 R battery

The PTC is a temperature-dependent resistor which is mounted close to the actual battery cells. It is used to measure the battery temperature when charging and allows the charger to turn itself OFF when the battery is overheating. This is useful when trying to charge a broken battery pack.

  • AK160 S600R
    600 mAh NiCd
  • AK160 S700R
    700 mAh NiCd
  • AK160 S1000R
    1000 mAh NiCd
  • AK160 S1400R
    1400 mAh NiCd
    R = 450Ω
  • AK161R-12
    1200 mAh NiCd
  • AK161R-14
    1400 mAh NiCd
  • AK161R-21
    2100 mAh NiMH
  • AK161R-27
    2700 mAh NiMH
Use in the Netherlands
The SE-660, and in particular the crypto-enabled SE-660-C, was used in the Netherlands by several special police departments and security organisations, including the ones listed below. Note that some of these organisations have meanwhile been renamed, merged or disssolved.

KLPD   Korps Landelijke Politiediensten
National Police Services.
LRT   Landelijk Recherche Team
National Police Investigation Team.
NR   Nationale Recherche
National Police Investigation Team.
CRI   Centrale Recherche Informatiedienst
Central Investigation Intelligence Service.
KTR   Kern Teams Recherche
Core Investigation Teams.
DKDB   Divisie Koninklijke en Diplomatieke Beveiliging
Division Protection Royal Family and Diplomatic Missions. Part of the KLPD.
DTOO   Dienst Technische Operationele Ondersteuning
Technical Operationsl Support Service. Part of the KLPD.
BSB   Brigade Special Beveiligingsopdrachten
Special Protection Branch. Department of the Dutch Military Police (Konklijke Marchaussee) taksed with the protection of VIPs.
DNB   De Nederlandse Bank
Dutch National Bank.
NS   Nederlandse Spoorwegen
Dutch National Railways.
VNT   VN-Tribunaal
United Nations Tribunal Court.
Compromise
On 24 October 2020, the Dutch investigative VPRO radio program Argos revealed that the Ascom SE-160 devices that had been sold to the Dutch police in the early 1990s, contained a so-called backdoor. This means that the cryptographic algorithm – from Crypto AG – had been weakened in such a way, that the radio traffic became readable to the US National Security Agency (NSA) [5][6].

Until the late 1980s, special enforcement teams of the Dutch police had used open – unencrypted – radio channels for their communication, which could be received by anyone with a scanner. After a series of major incidents, such as the kidnapping of brewer Freddy Heineken (1983), the kidnapping and death of top manager Gerrit Jan Heijn (1987) and the kidnapping and death of Army Colonel van der Kieft (1989), it was decided that special law enforcement units should get radios with the best possible encryption. In the latter case, the Colonel had been killed by a shot from the swat team, which was later attributed to the lack of reliable and secret communication.

The SE-160 radios were not only used by the Dutch Police, but also by special units of the Dutch Army (in foreign operations), criminal investigations teams, VIP protection teams, the Dutch Bank, the UN Tribunal and many other special services throughout The Netherlands. Unknown to the Dutch Government however, the company that supplied the encryption – the Swiss Crypto AG – was secretly owned by the German BND and the American CIA as part of Operation RUBICON [7].

Argos has now revealed that the situation led to a conflict between the BND and the CIA – the BND didn't want to provide insecure equipment to the Dutch – but that in the end the Americans won the argument. In the broadcast, former Crypto AG employee Jürg Spöerndli, confirms the supply of backdoored equipment to the Netherlands.

 VPRO Argos broadcast of 24 October 2020 (in Dutch language)
 VPRO long-read with background information (in Dutch language)


Branding
  • Ascom SE-160
    actual manufacturer
  • Bosch SE-160
    Bosch HF1208
  • Cryptovox SE-160
    Crypto AG, Hagelin
  • Autophon SE-160
  • Motorola SE-160
  • Efcyvox P400
    PTT Telecom (Netherlands)
Wanted
Any additional information about the SE-160, such as operator's manuals, service manuals, circuit diagrams, etc. but also additional perhipherals or parts that are not yet discribed on this page, are most welcome. If you have any such items, please contact us.


Technical specifications
  • Frequency
    VHF-L, VHF-H or UHF (see above)
  • Output
    1 - 2.5 Watt
  • Power
    7.5 V DC
  • Channels
    100, synthesizer controlled (programmable via PC)
  • Mode
    FM, PM
Documentation
  1. SE-160 Service Manual - WANTED
    Order number: 86999241019.
References
  1. Anonymous, Bosch SE-160/MB-05 handheld radio with encryption - THANKS !
    December 2016.

  2. Crypto AG, Company brochure, Crypto Products
    1992. Page 3.

  3. Oppermann Telekom, Ascom SE160
    Retrieved December 2016.

  4. Anonymous, Correspondence between the Dutch police and the Ascom distributor
    Netherlands, various dates. Not for public release.

  5. Argos, 'Eten en gegeten worden' in het spiegelpaleis van de geheime diensten
    VPRO Radio, 24 October 2020 (in Dutch language).

  6. Huub Jaspers et al., In het spiegelpaleis van de geheime diensten
    24 October 2020 (in Dutch language).

  7. Crypto Museum, Operation RUBICON
    February 2020.
Further information
Any links shown in red are currently unavailable. If you like the information on this website, why not make a donation?
© Crypto Museum. Created: Sunday 04 December 2016. Last changed: Wednesday, 08 June 2022 - 06:40 CET.
Click for homepage