View source for SAVILLE

{{Short description|Classified National Security Agency Type 1 encryption algorithm}}
{{Other uses|Saville (disambiguation)}}
'''SAVILLE''' is a classified [[National Security Agency|NSA]] [[Type 1 encryption|Type 1]] [[cryptography|encryption algorithm]], developed in the late 1960s, jointly by the [[Government Communications Headquarters|Government Communications Headquarters (GCHQ)]] in the UK and the [[National Security Agency (NSA)]] in the US.<ref name=":0">{{Cite web|url=http://www.cryptomuseum.com/crypto/usa/saville.htm|title=Crypto Museum, the SAVILLE encryption algorithm}}</ref> It is used broadly, often for voice encryption, and implemented in many encryption devices.

Little is known publicly about the algorithm itself due to its classified nature and inclusion in the NSA's [[NSA Suite A Cryptography|Suite A]]. Some documentation related to the [[KYK-13]] [[fill device]] and statements made by military officials confirm that SAVILLE has a 128-bit key, which consists of 120 key bits and an 8-bit checksum. Furthermore, it is known that SAVILLE has two modes of operation: Autonomous Mode (also known as Key-Auto-KEY or KAK) and Autoclave Mode (also known as Cipher-Text Auto Key or CTAK).<ref name=":0" />  On the [[Advanced INFOSEC Machine|AIM]] [[microprocessor|microchip]], it runs at 4% of the clock rate (compare [[Data Encryption Standard|DES]] at 76% and [[BATON]] at 129%).  The [[Cypris (microchip)|Cypris chip]] mentions two modes; specifications for [[Windster (microchip)|Windster]] and [[Indictor (microchip)|Indictor]] specify that they provide Saville I.

Some devices and protocols that implement SAVILLE:
* [[STU-I|Secure Telephone Equipment (STU)]]
* The [[VINSON]] family (voice encryption)
* UK Lamberton (BID/250)
* [[APCO Project 25]] (single-channel land mobile radios) (Saville has algorithm ID 04)
* Versatile encryption chips: [[Advanced INFOSEC Machine|AIM]], [[Cypris (microchip)|Cypris]], [[Sierra (microchip)|Sierra I/II]], [[Windster (microchip)|Windster]], [[Indictor (microchip)|Indictor]], [[Presidio (microchip)|Presidio]], [[Railman (microchip)|Railman]]
* [http://www.cryptomuseum.com/crypto/philips/spendex40/index.htm Spendex 40]
* [http://www.cryptomuseum.com/crypto/philips/spendex50/index.htm Spendex 50] (also known as DBT)
* [http://www.cryptomuseum.com/crypto/siemens/elcro/ex1-4.htm Elcrovox 1/4]
* Motorola's SECURENET encryption module named [[FASCINATOR]]

== References ==
<references />

==External links==
* [http://cryptomuseum.com/crypto/usa/saville.htm SAVILLE info at cryptomuseum.com]

{{Cryptography navbox | block}}

[[Category:Block ciphers]]
[[Category:Type 1 encryption algorithms]]


{{crypto-stub}}