Click for homepage
Crypto
USA
FILL
NSA
DS-102
  
CYZ-10 →
← KYK-13
  
KYX-15
Net Control Device · NCD - this page is a stub

AN/KYX-15 is a portable battery-operated key storage and transfer device, also known as a Net Control Device (NCD), developed around 1976 by the US National Security Agency (NSA). It can store up to 16 keys with a length of 128 bits each, and can be filled by a KOI-18, KYK-13 or by another KYX-15. When connected to compatible COMSEC (radio) equipment, it can be used for Advanced Remote Keying. Also known by its National Stock Number (NSN) 5895-01-026-9619.

The device measures 280 × 115 × 45 mm and weights 1.5 kg. The controls are at the right 1/3 of the case and are protected by a hinged lid. At the top right is a U-283/U connector (the 6-pin variant of the U-229) by which it can be connec­ted to a compatible radio or another fill device. The KYK-13 fill device (or equivalent) is the only device that can be fitted directly to this connec­tor. In all other cases, a fill cable is required.

The device has 16 compartments for 128-bit keys, each of which can be activated by a toggle switch marked with the corresponding number.
  

The KYX-15 can be used to transfer a single key, but can also update multiple keys in a single transfer. Furthermore, multiple 128-bit keys can be concatenated to form a single longer key. One of the unique properties of the KYX-15 is that it can be used to generated new 128-bit keys that are compatible with a wide variety of equipment. This features was intended for small closed groups, and circumvents the laborious task of key generation and distribution by the cipher authority. When used with a KY-57 voice/data encryptor, the KYX-15 can be used for Over-The-Air-Rekeying (OTAR). In case of an emergency, all keys can be destroyed from the control panel.

KYX-15 Net Control Device
A
×
A
1 / 1
KYX-15 Net Control Device

Mode selector
The desired mode of operation is selected with the 9-position rotary switch shown below. It is shown here in the OFF position. The outer two settings (Z SEL and Z ALL) can only be selected after depressing the metal spring marked DEPRESS.

  • Z SEL
    Zeroize selected compartments
  • OFF CK
    Power off / check key compartment
  • LD
    Load
  • VG
    Variable Generate
  • AK
    Automatic Keying
  • MK
    Manual Keying
  • RV
    Receive Variable
  • VU
    Variable Update
  • Z ALL
    Zeroize All compartments
Zeroizing
In case of an emergency, all keys should be destroyed. This is known as zeroizing. By convention, zeroizing is always a two-step procedure. In the case of the KYX-15, it requires the spring – marked DEPRESS – to be de­pressed and selecting one of the two zeroize settings: Z SEL or Z ALL.

When selecting Z SEL, only the selected key com­part­ments are purged. These are the com­part­ments of which the address selector (i.e. the toggle switch) is in the ON position. When selecting Z ALL (as shown here), all key compartments are purged, regardless of the setting of the switches.

  

Compatible devices on this website
AN/KOI-18 Key Tape Reader
AN/KYK-13 Key Transfer Device
KYK-13
Secure Telephone Unit
Secure Telephone Unit
Digital Subscriber Voice Terminal
Philips Spendex-40 secure telephone for voice, fax and computer
Philips Spendex-50, military secure crypto phone (a.k.a. DBT)
Elcrovox 1-4D narrow band voice and data terminal (STU-II compatible)
KY-57 (VINSON) Wide-band Voice and Data Encryption Unit
KY-99 (MINTERM) Narrow-band Voice and Data Terminal
KG-84 data encryptor
BVO-M (Mucolex compatible) Trunk Encryption Device
BVO-T (KG-81 compatible) Trunk Encryption Device
Aroflex II cipher machine, also known as PDLX-6141 or T-1285CA
KIV-7, embeddable KG-84 COMSEC module
Known compatible devices

Interior
The KYX-15 is housed in a die-cast aluminium enclosure that consists of two pieces: a bottom panel and a case shell with the controls. The interior can be accessed by removing 6 screws from the bottom panel, after which the two case halfs can be separated, as shown in the image above.

The interior can be divided into three areas: (1) the wiring of the controls at the far left, (2) the electronic circuits at the centre, and (3) the battery compartment at the far right. The electronic circuits consist of three stacked printed circuit boards (PCBs), held together by a metal frame. The PCBs are inserted into a backplane that also connects it to the wiring of the control panel.

KYX-15 interior
KYX-15 interior
Three PCBs
E-DUC board
E-DUC board - component side
E-DUD board
E-DUD board - component side
E-DUE/1 board
E-DUE/1 board - component side
Backplane with three slots (cards removed)
Backplane wiring
Controls wiring
B
×
B
1 / 12
KYX-15 interior
B
2 / 12
KYX-15 interior
B
3 / 12
Three PCBs
B
4 / 12
E-DUC board
B
5 / 12
E-DUC board - component side
B
6 / 12
E-DUD board
B
7 / 12
E-DUD board - component side
B
8 / 12
E-DUE/1 board
B
9 / 12
E-DUE/1 board - component side
B
10 / 12
Backplane with three slots (cards removed)
B
11 / 12
Backplane wiring
B
12 / 12
Controls wiring

Restoration
When we obtained our KYX-15, it was in unknown condition. The exterior had been repainted professionally and the mode selector knob had been replaced by an incorrect type. From a closer inspection we learned that the interior was complete, but that the mode selector — a 9 position rotary switch — was broken and beyond repair.

Problems
Battery compartment with improvised power wiring (cut-off)
Wrong type of knob
Broken MODE-selector
C
×
C
1 / 3
Battery compartment with improvised power wiring (cut-off)
C
2 / 3
Wrong type of knob
C
3 / 3
Broken MODE-selector

Connections
FILL
Below the hinged lid of the KYX-15 is a 6-pin U-229 connector (actually a U-283/U). By means of a fill cable, this receptacle can be connected to a crypto device, to a key transfer device like the KYK-13, or to another KYX-15. Below is the pinout when looking into the receptacle. Note that this device does not support the REQ/ACK signal on pin C.

  1. GND
    Ground
  2. MUX
    Multiplex
  3. REQ
    Request
  4. INFO
    Data
  5. IA
    Clock
  6. ORF
    Override
Specifications
KYX-15
  • Device
    Net Control Device (fill deice)
  • Purpose
    Key storage and distribution
  • Model
    KYX-15, KYX-15A
  • Manufacturer
    NSA
  • Year
    1976
  • Country
    USA
  • Developer
    National Security Agency (NSA)
  • Manufacturer
    ?
  • NSN
    5895-01-026-9619
  • Designator
    ON190303
  • Classification
    Unclassified CCI
  • Protocol
    DS-102
  • Key length
    128 bits (including checksum)
  • Checksum
    8-bit CRC
  • Power
    Battery 6V, BA-1372/U, BA-5372/U
  • Dimensions
    280 × 115 × 45 mm
  • Weight
    1.5 kg
KYX-15A
  • Model
    KYX-15A
  • NSN
    5810-01-095-1312
  • Designator
    ON274276
  • Difference
    Battery compartment at bottom
Printed circuit boards
Features
  • Local key generation
  • Over The Air Rekeying (OTAR) (with KY-57, KG-84)
Documentation
  1. Operator's and Maintenance Manual for KOI-18, KYK-13 and KYX-15
    TM-11-5810-292-13&P. US Army, 31 May 1989.

  2. CSESD-11
    Communications Security Equipment System Document for Fill Devices

    NSA, date unknown. Unclassified parts only. #CM303091/B.
     With corrected page orientation
References
  1. Jerry Proc and contributors, KYX-15
    Visited 28 April 2024.
Further information
Any links shown in red are currently unavailable. If you like the information on this website, why not make a donation?
© Crypto Museum. Created: Friday 26 April 2024. Last changed: Thursday, 03 July 2025 - 06:57 CET.
Click for homepage