BATON

BATON is a Type 1 encryption algorithm, used broadly throughout the U.S. government to secure all types of classified information.

BATON has a 128-bit block size and a 320-bit key. 160 bits of the key are checksum material; they do not affect the security of the algorithm itself but rather prevent unauthorized keys from being loaded if a BATON device ends up in the hands of an adversary. BATON is fast: on the AIM chip , it encrypts data at 129% of the clock rate, as opposed to 76% for DES, 25% for Triple DES, and 4% for SAVILLE. Its speed and parallelizability were major factors in its selection.

The Sierra II documentation suggests that BATON may be related to MEDLEY .

Usage

BATON is used in a variety of products and standards:

• APCO Project 25 (Public standard for land mobile radio) (Algorithm IDs 01 and 41)
• PKCS #11 (Public standard for encryption tokens)
• CDSA/CSSM (Another public standard)
• HAIPE /HAIPIS (NSA's version of IPsec)
• FNBDT (Advanced flexible voice security protocol)

• Thales Datacryptor 2000 (a British network-encryption box)
• SecNet-11 (a crypto-secure 802.11b PC Card, based on the Sierra chip )
• Fortezza Plus (a PC Card product, used in the STE)
• SafeXcel-3340 (a HAIPIS network-encryption box)
• Numerous embeddable encryption modules: AIM , Cypris , MYK-85 , Sierra (microchip) , etc.

External links

• PKCS documentation
• Discussion of BATON
• Quotes about BATON