General Dynamics secures commercial smartphones

In February this year, the communications division of defense contractor General Dynamics presented a software platform called GD Protected. This is the first product that secures commercial available Android smartphones in a way that they can be allowed to handle classified information.

For decades, General Dynamics has been manufacturing devices for securing top level communications for the US government and armed forces, like the Sectéra voice encryption family. One of those products was a highly secure cell phone for GSM, which was produced from 2002 until 2012.

Securing common cell phones generally requires hardware solutions, but to keep in pace with the fast evolving commercial smartphone technologies, security measures are now implemented by using software applications. For smartphones there are already quite a number of apps for encrypting voice and data, but GD Protected also secures the Android operating system in order to meet the requirements for handling classified communications.

Initially, GD Protected comes in two different versions, one for the LG Optimus 3D Max, and one for the Samsung Galaxy S IV smartphone. General Dynamics is looking to converge the two approaches in the future, as well as supporting a broader range of Android devices. The pricing has yet to be disclosed, but the company said it would be licensed on a "very competitive" basis.

Both versions make it possible to use the same smartphone for both accessing commercial phone and internet services as well as making encrypted voice calls, using secure email and even accessing classified networks.

These secure communications are provided by a number of approved apps from a controlled government or enterprise app store. These include a Secure Voice over IP (SVoIP) app which encrypts voice communications and runs over the data network. Other app offerings, available from the third quarter of this year, will include secure chat and secure video conferencing.


GD Protected for the LG Optimus

General Dynamics first presented GD Protected at the Mobile World Congress (MWC), which was held in Barcelona from February 25-28, 2013. For this occasion, the product was installed on an LG Optimus 3D Max smartphone and demonstrated to press and public:

Demonstration of the LG Optimus 3D Max, secured by General Dynamics

For this phone, GD Protected provides two separate copies of the Android operating system, one for personal use and the other for business use. A dedicated hardware button on the phone is used to flip between the two environments. This so-called dual-persona feature allows users to seamlessly switch between personal and secure operating modes, indicated by thin green and red borders, respectively.

The personal side is completely open and acts just like a conventional smartphone, whereas the secure side is more restricted. Data is firewalled between the two sides so, for example, data from the secure side cannot be accessed or copied over to the personal side, and the secure side cannot be tampered with by malware.

This partition of the handset into two separate virtual smartphones is controlled by the OKL4 mobile hypervisor or "microvisor" platform, which was gained by General Dynamics from its acquisition of Open Kernel or OK Labs in September 2012.

Additional security is provided by the Fixmo Sentinel Integrity Services. This offers an integrity verification through advanced monitoring and remediation techniques, proactively detecting and preventing mobile device operating system tampering, policy violations, system-level state changes, and the presence of unverified third party apps. The Fixmo Sentinel Integrity Service was developed as part of an agreement with the NSA and is also used by other governments.

Overview of the GD Protected solution for the LG Optimus smartphone
(source: Engadget.com)

Compared to the solution for the Samsung Galaxy smartphone (see below), the use of a dual Android operating system for the LG Optimus offers slightly less security, but almost complete freedom on the personal side of the phone. The secured LG Optimus 3D Max will be available through General Dynamics from the end of July 2013.


GD Protected for the Samsung Galaxy

For the new Samsung Galaxy S IV smartphone, the GD Protected software comes on top of Samsung's KNOX platform, which was also presented at the Mobile World Congress in February and was developed in cooperation with General Dynamics. KNOX runs a Security Enhanced version of Android, or SE Android, which has been developed by the US National Security Agency (NSA).

The KNOX platform, which is available for government and enterprise users only, protects both data which are stored on the smartphone and data which are sent and received. KNOX creates an isolated and secured container within the memory area, with its own home screen, launcher, applications, and widgets. Applications and data inside the container are separated from applications outside the container.

Stored data are encrypted using an Advanced Encryption Standard (AES) algorithm with a 256-bit key. For secure communications the Samsung KNOX container comes with a FIPS-certified VPN client called "per-app VPN". This supports strong IPSec VPN encryption, including Suite B cryptography, which is suited for the majority of sensitive communications by government agencies.

Overview of the KNOX platform for the Samsung Galaxy S IV
(source: Samsung.com)

With the additional GD Protected the original Android operating system of the Samsung Galaxy S IV will be replaced by a hardened Android version with even more security measures. This replacement is done by simply calling General Dynamics with the IMEI number and then the Android operating system will be replaced via an over-the-air reflash.

The hardened operating system includes root certificates from General Dynamics that replace those from Samsung. This means that any subsequent changes need to be digitally signed by General Dynamics, ensuring the integrity of the Android operating system.

Compared to the dual Android operating systems on the LG smartphone, the Samsung solution of installing new firmware offers a slightly higher level of security but at the expense of user freedom. The GD Protected platform for the Galaxy S IV will be available from May 2013.

Access to US Department of Defense networks

General Dynamics' GD Protected platform was developed according to the requirements of the program for secure mobile communications, codenamed FISHBOWL, which was presented by the NSA in February 2012. The goal of this program is to provide a secure Voice over IP capability using commercial available devices that can be approved for handling classified information.

In October 2012, the US Department of Defense (DoD) announced that they were looking for industry contractors to develop a secure communications system for at least 162.500 iPhones, iPads and Android systems. This should provide alternatives to the BlackBerry, which was until then the only device approved for secured email access to the Pentagon’s unclassified networks.

An interesting coincedence was, that when General Dynamics presented their GD Protected product last February, DoD published a plan to equip up to 600.000 mobile device users with "secure classified and protected unclassified mobile solutions" based on commercial-off-the-shelf (cots) products. This program may eventually be expanded to handle up to 8 million devices.

For use by the US military, General Dynamics already offers a two-factor sign-on process. This is done by inserting a military Common Access Card (CAC) into a separate card reader, which connects to the smartphone through Bluetooth. When a PIN code is entered on the phone, it will validate the PIN against the CAC card. This was also shown in a demonstration at the MWC in Barcelona, using a Samsung Galaxy S III:

Demonstration of the two-factor sign-on process
using a Common Access Card (CAC)

On May 3 it was announced that mobile devices equipped with the Samsung KNOX platform were approved by the US Department of Defense (DoD) for use in DoD networks. The BlackBerry 10 phones, the PlayBook tablet and the BlackBerry Enterprise Service 10 were also approved, and it's expected that Apple's iPhone and iPad should gain DoD approval later this month.

However, these approvals only grant access to unclassified DoD networks (like the NIPRNet), which is often not specifically stated in press reports. Until now, the only mobile devices approved for access to classified networks are General Dynamics' Sectéra Edge and an NSA directed test version of the Motorola Razr Maxx.

When equipped with GD Protected the LG Optimus and Samsung Galaxy S IV will be the first commercial available smartphones to get access to classified networks. At the moment this can only be used for Sensitive But Unclassified (SBU) communications, but General Dynamics is hoping to attain an NSA certification for classified communications (Confidential, Secret or even Top Secret) in the third quarter of this year. Only by then may these phones get access to secure networks like the SIPRNet.


A Boeing alternative?

Early 2012 not only General Dynamics announced the development of a secure smartphone solution, but also the aerospace and defense company Boeing. The announcement of the latter company got most media attention, but this was probably mainly because (secure) phones seemed quite a strange new product for Boeing, which is by most people only known for its civil aircrafts.

Unlike General Dynamics, Boeing has no history in making encryption products and as General Dynamics already presented it's software last February, nothing was heard from Boeing anymore. After a request in March, a Boeing spokesperson told this weblog, the company is still developing a trusted mobile device that will serve the US government, defense and security market. When this phone will be launched is not known yet.


Sources and links

- 29-10-2012: Pentagon plans to buy iPhones, Androids in threat to BlackBerry’s market share
- 25-02-2013: General Dynamics secures Samsung and LG Android smartphones
- 25-02-2013: General Dynamics locks down Android
- 28-02-2013: Samsung Takes Low-Key Approach on Cellphones After Reaching the Top
- 28-02-2013: General Dynamics eyes government-level security on smartphones
- 03-05-2013: DoD grants network access to Android, BlackBerry 10 devices

How Obama's BlackBerry got secured

Around January 20, 2009, when Barack Obama took over the office of president of the United States, there was quite a lot of media attention about the fact that he had to give up his BlackBerry, because it was considered to be a security risk.

This caused almost world wide media attention, but the follow-up was less accurately covered and a number of different stories were told. Here we will show that Obama actually kept his beloved BlackBerry, but only after it had been secured by special encryption software and some additional security measures.

Barack Obama using his BlackBerry 8830 during the election campaign in 2008
(Photo: Getty Images)

Obama's predecessor, George W. Bush, also used a BlackBerry during the 2000 presidential campaign, but had to give it up, as well as the use of any e-mail software, upon taking office. Three days earlier, he sent out a final e-mail to 42 friends and family members to inform them that he would no longer correspond electronically.

Eight years later, Barack Obama was also forced to give up his BlackBerry, not only because of concerns that its communications and e-mail could be intercepted, but also because of the Presidential Records Act of 1978. This makes all written White House communications public property and subject to examination under the Freedom of Information Act (FOIA).

However, this time Obama definitely wanted keep using this popular business phone to stay in touch with people outside the White House bubble. Therefore, the Secret Service, The White House Communications Agency (WHCA) and the National Security Agency (NSA) went looking for a solution.

US President Obama using a silver BlackBerry 8830

Sectéra Edge

Some media suggested Obama had to change his BlackBerry for the Sectéra Edge, a highly secured PDA, which is produced by General Dynamics for the US military. But the Sectéra Edge is quite big, heavy (340 grams) and bulky and therefore hardly convenient for someone used to a BlackBerry. This solution would also require everyone that Obama would like to communicate with to have the same phone, which is priced between 2650,- and 3350,- USD. Secure communications are only possible if both ends use the same (or compatible) encryption devices.

According to other sources, the Sectéra Edge was only used in addition to Obama's BlackBerry, until a permanent solution was worked out. Reports weren't clear about how exactly these two devices were combined. Probably the Sectéra Edge acted like an encryptor, which was plugged into the BlackBerry, so Obama could keep using this device to make a call or send out an e-mail, which then went through the Sectéra Edge, encrypting it, before going over the telecommunications network.

The Sectéra Edge, manufactured by General Dynamics

Compromise

That latter, temporary solution must have been even more cumbersome, so a compromise was made, in which president Obama could keep using a BlackBerry, but equipped with a software package to encrypt phone calls and text and email messages up to the level of Top Secret.

For this purpose, the security agencies choose the SecurVoice application, which was developed by The Genesis Key, in cooperation with engineers from BlackBerry manufacturer Research In Motion (RIM). After the NSA did all the necessary tests and checking to make sure the software met federal standards like FIPS 140-2, the highly secured BlackBerry was delivered to the president somewhere in May or June 2009. He also gave up his old e-mail address and switched to a new one, which is kept secret.

Maybe we can see the new, secured BlackBerry in this picture below, where there are two BlackBerrys lying in front of Obama. The silver one seems to be the BlackBerry 8830, which he already used during the election campaign. The black one, probably a BlackBerry 8900, could then be the new secure one, as we can see the president using this one in later pictures:

President Barack Obama works with Jon Favreau, director of speechwriting, on the Normandy speech
aboard Air Force One enroute to Paris. In front of him are a black and a silver Blackberry.
(White House photo by Pete Souza, June 5, 2009 - click for a bigger picture!)

Detail from the picture above, showing the two BlackBerrys

The secure BlackBerry was not only issued to the president, but also to a small group of people with whom he likes to stay in close contact with. This because, as said, it's only possible to have secure communications if both ends are using the same encryption method. This limited Obama's goal of keeping in touch with the outside world: encryption (still) means exclusion.

The number of people able to message and call the president is probably only between ten and twenty. Included are vice-president Biden, Obama's chief of staff and some of his top advisers, his press secretary, first lady Michelle Obama, a few other family members, and a small group of personal friends from Chicago.

The Genesis Key

The SecureVoice software for the presidential BlackBerry was developed for a small company called The Genesis Key, Inc., based in Washington DC. This company was founded in October 2008 by W. Steven Garrett, who took the name from an item used in the 1986 computer game The Legend of Zelda.

The software was developed in the previous four years, apparantly for one of the projects of Steve I. Cooper, a former CIO (Chief Information Officer) for the White House, the Department of Homeland Security and the American Red Cross. He is now a member of the advisory board of SecurDigital, Inc., a firm founded in October 2009 by Bruce Magown and Steven Garrett to distribute the SecurVoice software applications.

Steven Garrett is a man with a quite surprising background. His Linked-In profiles show that he has been involved in a very wide range of businesess, like manufacturing plants for Fannies Fat Free Cheesecakes and Fat Free Burger (providing microwave-ready cheeseburgers to military commissaries) and marketing & sales for Lion Sportswear and Faded Glory Jeans. He also developed a highly secure appartment building, named Garrett Place. At his twitter account he describes himself as "Proven Rainmaker, Change Agent, Strategist, and Driving Force for Unprecedented, Exponential Growth in Revenues, Earnings, and Market Valuation".

SecurVoice

The Genesis Key released the SecurVoice software in December 2008, claiming this to be the world's first completely secure voice and data encryption solution (SecurVoice should not be confused with Secure-Voice.com).

Allthough there were already a number of other hardware and software encryption solutions, the SecurVoice application should able to protect global voice connections between and within all types of cell, satellite, PBX, SDR and VOIP phones and phone systems. SecurVoice is 100% Java based, which should make it device- and carrier-independent and compatible with all legacy systems.

Each phone can be loaded with up to three levels of security, each one accessible through a separate icon and recognizable by a different ringtone. When dialing a number and this number has a cryptographic key associated with it, then the call is automatically placed as a secured call. If a phone number has no cryptographic key associated with it, then the cell phone operates normally and the call is placed unencrypted.

The SecurVoice software comes in two versions:
- Phone-to-Phone (P2P), where secure calls are made directly from one cell phone to another. The price for government users is 1795,- USD per application.
- Phone-to-Server (P2S), where secure calls are routed from the phone to an enterprise server and back. The price of a server license is between 2500,- and 25.000,- USD.

It's likely, that for Obama the server solution was chosen. This allows a centralized key management, monitoring of all secure calls and record keeping of the messages. One source says the president may have to wait up to 50 minutes for an e-mail reply, as the system actively sniffs out incoming messages for viruses or Trojan horses.

Overview of the SecurVoice application options
(by The Genesis Key/SecurDigital)

Encryption

The SecurVoice software features a dual-layered, or hybrid encryption scheme, which means it combines symmetrical and asymmetrical encryption algorithms. It performs the voice encryption in real time by using a fast symmetric cipher, using a strong key. This key is then encrypted with a public-key or asymmetrical cryptosystem, like RSA or ECC, and transmitted together with the encrypted message. This is also how the vast majority of present-day communications encryption works.

The SecurVoice symmetric encryption uses a 256-bit session (conversation) key, which replaces the encryption every second with non-reoccurring numbers. This session key is a combination (salted hash) of the sender Base Secure Key (stored in the recipient key store) and a random session key. According to the manufacturer, SecurVoice uses classified Type 1 encryption algorithms, which are restricted to government and military users. For corporate users, public crypto algorithms like Triple DES and AES are used.

In case of a SecurVoice enterprise server, the software converts voice into encrypted data, which is then sent over the carrier network to the SecurVoice Enterprise Server where it is decrypted. It is then re-encrypted and sent back over the carrier network to the receiving phone, where it is decrypted and converted back to voice. It's also possible to select different encryption algorithms, so that, for example, encryption from a cell phone to the enterprise server may be the AES algorithm with a 128-bit, while from the server to the receiving phone this may be done by using Elliptic Curve Cryptography (ECC).

President Obama using his BlackBerry 8900 in the limousine while traveling
from the University of Indonesia to the airport in Jakarta, Indonesia.
(White House Photo by Pete Souza, November 10, 2010)

Security risks

As Obama wanted to keep using a BlackBerry device, the security solution is software only. This still leaves risks like compromised hardware and hacking by means of social engineering. Therefore, some security specialists say that it's not impossible to hack Obama's BlackBerry and that foreign states and other hackers will likely try to do so.

To minimize these risks, the secured BlackBerrys prevent forwarding e-mail messages from the president and sending him attachments. His secret e-mail address is likely to be changed regularly as well and Obama's friends and staff members were lectured about these security issues.

Another risk of the president using a BlackBerry, like a cell phone in general, is that enemies can try to track the president's location in real-time, even when GPS is disabled. Every cell phone regularly transmits it's IMEI-number to the cell tower, and this can be intercepted by devices like a Triggerfish. How this tracking can be done, and countered, is described in this, respectively this article.

One source says the presidential BlackBerry can only connect to a secure base station, which can be used to hide the IMEI-number of the device and thus prevent tracking it. This would mean the White House Communications Agency has to carry such a secure base station wherever the president goes.

There must be also a secure base station inside the presidential limousine, as we can see in the picture above. First because using a foreign cell phone network would be a big security risk, but also because the limousine is most likely constructed like a Faraday cage, and therefore a BlackBerry could only be used if there's a base station in the car itself (and probably also in Air Force One).

President Obama using his old BlackBerry, during a campaign
visit to Albuquerque, New Mexico in August 2008

Conclusion

As we have seen, president Obama has kept his BlackBerry, but only after it had been secured. This took quite some effort: newly developed software had to be tested within a couple of months, all his contacts have to use the same software, limiting their number to a rather small group, and a secure base station has to follow the president. Nonetheless, this ad hoc solution for the president marks the beginning of an era in which top level mobile communications will no longer be secured with dedicated hardware, but by using software applications for regular commercial smartphones.


Sources and Links

- FoxNews.com: Obama Getting Super-Secure BlackBerry
- New York Times: Symbol of Elite Access: E-Mail to the Chief
- Washington Times: Obama soon to get secure BlackBerry
- The Telegraph: Barack Obama's BlackBerry 'no fun'
- September 2010: The X-Change Corporation Acquires Genesis Key, Inc.
- Interview with Steven Garrett: Wireless Technology Risks and Enterprise Security
- See also: securvoice.blogspot.com

The phones and the iMac of Kim Jong-un

Last week, North Korea said that it entered a "state of war" with neighboring South Korea. According to a report from the state-run Korean Central News Agency (KCNA) this includes a threat to "dissolve" the United States mainland too.

On Friday, March 29, KCNA also released some pictures of the North Korean leader Kim Jong-un, giving a rare look at some of his communications equipment:

North Korean leader Kim Jong-un presides over an urgent operation meeting
at the Supreme Command in Pyongyang, March 29, 2013.
(Photo: KCNA through Reuters)

Quite surprisingly we see that at the right side of the table, there's an aluminum unibody iMac computer (with a corded keybord and mouse). This computer is made by the American manufacturer Apple and is an iconic capitalist lifestyle item.

If this isn't a fake remake, it's a bit strange that we see this computer here, because there's a full US embargo for exporting products to North Korea. Probably the iMac came in from China, the only ally of the communist republic.

The whole arrangement looks very much like propaganda, and we can doubt whether the iMac is very functional: with a close look we can see that the yellow ethernet cable lies disconnected next to it.

At the left side of the table there are three white telephone sets (no red one!). These phones seem to be the same as the one we can see in the picture below, which looks like a quite ordinary office phone:

Kim Jong-un smoking a cigaratte in an empty looking launch control center,
after Pyongyang successfully launched a satellite into space

Earlier in March, North Korea already disconnected various hotlines with South Korea. One hotline, which is maintained by the international Red Cross and runs through the truce village of Panmunjom, was cut off on March 11. This also happened with another hotline, which connects to the US-led United Nations Command at the border.

On March 27, North Korea also cut off a military hotline with South Korea, that allows cross-border travel to the jointly run Kaesong industrial complex in the North. This hotline, which actually consists of four telephone lines, is used to communicate about the daily cross-border traffic of about 900 workers and cargo traveling back and forth to the Kaesong complex.

Now there is still one active hotline left (consisting of three phone lines), linking the civil aviation authorities of North and South Korea.


Sources and Links
- Reconstruction: North Korean Photo Reveals ‘U.S. Mainland Strike Plan’
- Article about North Korea Cuts Off the Remaining Military Hot Lines With South Korea
- Article in Dutch: Kim Jong-Un plant wereldoorlog op verouderde iMac

Papal telephony

(Updated: March 27, 2013)

Earlier this month, pope Benedict XVI announced his historical decision to step down from his office on February 28, 2013. This makes him the first pope to resign since 1415! Therefore, a good moment to take a look at the telephone equipment, which is used by this leader of almost 1.2 billion catholics.

Pope Benedict XVI, assisted by his private secretary, signs a papal bull.

In this picture we see pope Benedict XVI at work in his private study in the papal apartment of the Apostolic Palace in Vatican City. At the far right we can see two white telephones sitting on a side table: an older one with a rotary dial and a newer one with a keypad.

The same combination of a somewhat older rotary dial phone and a newer keypad telephone can be seen at the table of the guard, next to the main entrance door of the papal apartment:

Swiss Guard soldier garding the door
to the papal apartment, ca. 1989

Three rotary dial phones in different colors on a side table
next to the desk of pope John Paul II in the early 1980's.

To prevent people from directly calling the pope, the extension number of the papal apartment is listed nowhere, not even in Vatican phone books. Only a handful of people chosen by the pope himself have his number, which also changes with each new pope. Pope Benedict XVI had no a beeper or cell phone, but he could be reached through the cell phone of his personal secretary, msgr. Georg Gänswein.

The Vatican receives almost 2000 calls a day, and there are always a handful of people saying they must speak with the pope for whatever reasons. One of them was Steve Wozniak, the co-founder of Apple, who once dialed Vatican City, using a so called blue box. He identified himself as Henry Kissinger by imitating Kissinger's German accent and asked to speak to the pope. But due to the different time zone, he was sleeping at that time.*

A very rare picture of pope Benedict XVI using a telephone

The papal telecommunications started in 1886, at the beginnings of telephony, thanks to Giovanni Battista Marzi who invented the world's first automatic telephone exchange, which linked 10 separate phones, but could only make internal calls. A few decades later, Guglielmo Marconi effected the first Italian link via radio, connecting the Vatican and the papal summer residence at Castel Gandolfo.

After the 1929 Lateran Pacts agreement with Italy, by which the Vatican City State was created, the Vatican was finally allowed to send and receive calls to and from the rest of the world. Therefore, in 1930 a new central telephone exchange was donated by the International Telephone & Telegraph (ITT). It was installed in the Belvedere building and provided telephone services for approximately 360 end users in the various Vatican offices and residences. The telephone exchange was consecrated by pope Pius XI on November 19th, 1930.

The first Vatican telephone switchboard,
with the upper left lines 2 and 3 are for the pope
The book is the Annuario Pontificio, the directory of the Holy See
(Photo: David Seymour, 1948)

The Bell Rotary Telephone-system was state of the art at the time and had the following functions:
1. Dial a direct phone set inside the Vatican
2. Get a connection with any phone with only two numbers
3. Get an automatic connection with someone in Rome by just dialling the number and adding a "0" in front for an external line
4. Answer calls from outside the Vatican at a post with 2 seating areas
5. priority for some telephone sets for emergencies and important calls

Together with the new exchange, catholics in the United States donated pope Pius XI the first papal telephone: an apparently solid gold phone set, inlaid with mother-of-pearl, emblazoned with the papal arms and decorated with blue enamel. The phone is now for display at the Vatican State Telecommunications Department:

The first papal telephone, donated to pope Pius XI by catholics in the United States.
(Photo: Dancejill @ TripAdvisor)

This golden papal telephone was used by several popes, until the end of pope John XXIII's pontificate in 1963. Later, the phone in the pope's apartments was a standard phone in 'papal' white.

In 1957 the International Telephone and Telegraph (ITT) also presented a (less elaborate) ceremonial golden telephone to the Cuban dictator Fulgencio Batista. This was depicted in the 1974 movie The Godfather Part II, where "United Telephone and Telegraph" and American industrialists present a solid golden telephone to the Cuban dictator.

Pope Pius XI sitting at his desk, with the golden telephone.

Postcard showing pope Pius XII writing a letter. In the background we can
see the golden phone of Pius XI and another white telephone set,
probably made by the Italian manufacturer Olivetti.

In the forties and fifties it was very special when the pope was calling. For example, when Pius XII picked up the phone and said "que Pacelli" (his original family name), the receiving end would kneel to hear the papal message.

In 1960 the Bell telephone system was replaced by an ITT Pentaconta exchange with a capacity of 1500 numbers, which was later extended to 3000. In June 1992 the Vatican's third central telephone exchange was inaugurated, providing the Vatican with an advanced technological interface, qualifying the Vatican State amongst the first to have a completely numeric telephone network.

The new telephone plant was installed in a forepart of the Belvedere building and consists of a modern numeric telephone exchange with 5120 terminations. The exchange is also equipped with a numeric switch for operator call management and it is linked via radio to the San Giovanni in Laterano, the Palazzo di San Callisto and the Palazzo della Cancelleria. These Roman buildings are extra-territorial zones under jurisdiction of the Holy See.

Since 1948, the Telephone Service of the Vatican State has been run by members of the religious order of the Society of St. Paul. It employs over 30 laymen, a few priests and a dozen nuns, who are members of the Pious Disciples of the Divine Master. On account of their in-depth knowledge of foreign languages, they work for 24 hours a day in six-hour shifts as operators of the manual switchboard:

Two nuns operating the Vatican telephone exchange
(Photo: 30giorni, date unknown)

The Vatican Telephone Service is the telecommunications provider of Vatican City, which is part of the Governorate’s Department of Telecommunications since 2002. The Telephone Service maintains a complex infrastructure of telephone and data networks, designed and maintained by its own personnel. In 2005, the Vatican telephone service handled 8.5 million outgoing calls.

In November 2005 the telecommunications department moved into a new three-story brick building, with sleek, comfortable and modern facilities. They also include historical items, such as papal telephones and early technological equipment, on display in glass cases.

A better look at the present-day keypad telephone, here in
a room used by the cardinal secretary of state, Bertone

After the resignation of pope Benedict XVI, the cardinals of the Roman Catholic Church came together to elect a new pope. The traditional election was done in the famous Sixtine Chapel, but the cardinals stayed in the Casa di Santa Marta, with over 120 rooms. This guesthouse was build in 1996, and got a state-of-the-art Voice over IP (VoIP) telephone network, with Cisco 7911G Unified IP phone sets, as can be seen in the picture below:

A Cisco 7911G Unified IP phone on a side table in the Vatican
(Photo: Orbis Catholicus Secundus, December 2010)

After the Argentinian archbishop and cardinal Jorge Mario Bergoglio SJ was elected to be the new pope on March 13, he named himself Francis. Shortly afterwards he spoke to former pope Benedict by phone - the first time ever a pope calls his predecessor!

In the days to follow, pope Francis personally called quite a number of other people (including his dentist), probably with the Cisco phone from his Santa Marta suite, but maybe he is also the first pope using a mobile cell phone. We will see.


Sources and Links
- Web page of the Vatican Telephone Service
- Extensive article: On call 24/7: Vatican phone system directs thousands of call each day
- Blog posting: 'Cept for the Pope maybe in Rome
- Wikipedia article: Golden Telephone

See also:
- Bruce Schneier's blog about Hacking the Papal Election
- Article about Vatican admits secretly bugging its own clergy

President Reagan using a STU-II telephone

Here we see a great and very rare, maybe even unique picture of former US president Ronald Reagan using a STU-II secure telephone:

President Reagan making an early morning telephone call regarding the invasion of Grenada
(Photo: Reagan Library, October 22, 1983)

In this picture we see president Reagan making a phone call to his staff regarding the invasion of Grenada. Because he was staying at the Eisenhower cabin on the Augusta National Golf course in Georgia, it was necessary to create a secure telephone line with the White House.

This was done by installing a STU-II, which was the second generation Secure Telephone Unit (STU). This system was introduced by the NSA in the early 1980s, and replaced older systems, like the extremely bulky KY-3, and was the successor to the STU-I.

In the picture we see the STU-II telephone, with handset, a normal keypad, some indicator LEDs and three extra buttons at the bottom, for selecting secure or nonsecure mode. This phone only acted as terminal or user interface, because the actual encryption system (crypto designation: KY-71) was located in a large metal cabinet, with which it was connected through a thick 9-way cable. The STU-II was built by ITT with Northern Telecom as a sub-contractor.

The same room with left to right: national security advisor Bud McFarlane,
secretary of state George Shultz and president Ronald Reagan.
The STU-II secure phone is on the table at the far right.
(Photo: Corbis)

Additionally, a reader of this weblog told us that during presidential roadtrips the STU-II was transported in aluminium transit cases with a packed weight of 170 lbs. Each case contained one KY-71 (the crypto engine), one HYX (the handset) and two ZAMX (unknown).


As of 1987, the STU-II was replaced by the much smaller STU-III, which was a secure phone that consisted of one single desktop device only and had much better speech quality. This new phone became available for president Reagan by the end of his second term:

President Reagan using a Motorola SECTEL 1000 version
of the STU-III secure telephone program
(Photo: NSA, date unknown)

US State Department red phones

On February 1st, senator John Kerry became the new US Secretary of State, succeeding Hillary Clinton, who held this office since January 2009. John Kerry is just two weeks in office, but we already have a nice picture of him in his new office:

U.S. Secretary of State John Kerry speaks by telephone with
UN Secretary-General Ban Ki-moon from his Inner Office
at the Department of State, February 5, 2013.
(State Department photo)

This picture is taken in the so called inner or private office, which is next to the bigger ceremonial office, where the secretary of state is most often seen, receiving and talking to his guests. The smaller private office is used for the actual work, and therefore that's also where the phones are (the US president also has a rarely seen private office, next to the ceremonial Oval Office).

On the desk we see a Cisco 7975 unified IP phone with a 7916 expansion module. With a close look we can see that the phone has a yellow faceplate (like the one in the header of this weblog), instead of the standard silver one, which indicates that it's part of the new, highly secure Executive Voice over Secure IP-network. This network connects the president with all major decision makers.

The phone which secretary Kerry is using in the picture, is a high end Avaya/Lucent 6424D phone set, which is part of the internal State Department telephone network. This phone can also be seen in many pictures of the ceremonial office. Finally, we see a really large videoteleconferencing (VTC) screen with camera on top.

It seems the Cisco phone and the VTC-screen are installed quite recently, because when former secretary of state Hillary Clinton showed her inner office in May 2010, there was at least one other type of phone, which was there already when Madeleine Albright held this office:

Video still of former Secretary of State Hillary Clinton showing her
private office to Scott Pelley of the CBS show 60 Minutes.
(click to watch the video!)

Former Secretary of State Madeleine Albright in her private office
(Date unknown)

In both these pictures, we see a big white Integrated Services Telephone (IST) at the lower right corner of the bookshelfs. This futuristic looking phone was designed by Electrospace Systems Inc. and later on produced by Raytheon. It was part of the Defense Red Switch Network (DRSN), which is the main secure telephone network of the US military.

As we saw in an earlier posting, the president had a newer version of this phone, the IST-2, on his desk in the Oval Office. In 2011 that phone was also replaced by a Cisco 7975 IP phone, just like the one which is now at the desk of the secretary of state. So it looks like these new IP phones of the top secret executive VoIP network are gradually replacing the so called red phones of the DRSN, which is still an old fashioned switched telephone network.

The phones of the Defense Red Switch Network are sometimes called "red phones", because in the sixties and seventies, the telephone sets connected to predecessors of this network were often red. A nice example of such an early day red phone is the one in this picture:

This is a very common phone without rotary dial, made by ITT. Phones like this are still available today, for example for hotlines or emergency lines of any kind. This phone was probably used for a predecessor of the DRSN, like the Automatic Secure Voice Communications Network (AUTOSEVOCOM). This is indicated by the label, which says: "Up to TOP SECRET Information may be processed on this system" with next to it, the eagle from the seal of the United Stated and the words "Bureau of Diplomatic Security":

The Bureau of Diplomatic Security (DS) is an agency of the State Department, which is responsible for protecting US embassies and diplomatic personnel and securing critical information systems, like for example the telephone networks.

Therefore, the red telephone in the picture was probably used for a secure telephone connection at one of the major embassies, at the State Department operations center, or maybe even in the office of the secretary of state of that time!