DI-EMCS-81687

TEMPEST Control Plan

The TEMPEST Control Plan documents the TEMPEST control design techniques proposed for a development program of an equipment or system, in order to minimize potential TEMPEST vulnerabilities.

Approval DateAugust 14, 2006

AMSC Number7602

Preparing Activity—

Project Number—

OPRNS/I3213

DTIC ApplicableNo

GIDEP ApplicableNo

Limitation—

Applicable Forms—

Approval Limitation—

Form Version—

DID Formatdd_form_1664

963C CompliantNo

DISTRIBUTION STATEMENT A: Approved for public release; distribution is unlimited.

Supersedes

—

Description & Purpose

—

Application & Interrelationship

—

Use & Relationship

The TEMPEST Control Plan documents the TEMPEST control design techniques proposed for a development program of an equipment or system, in order to minimize potential TEMPEST vulnerabilities.

a. This DID contains the format and content preparation instructions for the data product generated by the specific and discrete task requirement as delineated in the contract.

b. This DID is applicable to contracts that reference:

NACSEM 5112, "NONSTOP Evaluation Techniques" (entire document),

Paragraphs 5.1.5.1, 6.1.1.6.1 and Appendix F of KAG-30A/TSEC, "Compromising Emanations Standards Cryptographic Equipment,"

or equivalent and require preparation of a TEMPEST Control Plan.

Preparation Instructions

1Reference Documents.The applicable issue of documents cited herein, including their approval dates and the dates of any applicable amendments, notices, and revisions, shall be as stated herein. NACSEM 5112, "NONSTOP Evaluation Techniques," current edition; and KAG-30A/TSEC, "Compromising Emanations Standards Cryptographic Equipment," current edition, are available at the Director, National Security Agency, Attention: I3213, 9800 Savage Rd, Suite 6706, Fort Meade, Md 20755-6706.

2Format.The TEMPEST Control Plan may be in the contractor's format.

3Content.The TEMPEST Control Plan shall be in accordance with paragraph 5.1 (Control Plan) of NACSEM 5112, or paragraphs 5.1.5.1, 6.1.1.6.1 (Control Plan) and Appendix F (Control Plan) of KAG-30A/TSEC, or as identified in the contract. A Control Plan shall include, as a minimum, the following information:

3.1Title Page.The title page shall include: Name of the equipment or system. Name of the organization or firm preparing the TEMPEST Control Plan. Name of the Contracting Agency. Contract Number.

3.2Management Control.This section shall include specific responsibilities, lines of authority, and control. An implementation plan for TEMPEST control, with milestones, shall be included.

3.3General Description of Equipment

3.4Statement of TEMPEST Requirements

3.5Mechanical Design.This section shall include the following:

3.5.1Construction TechniquesHousing material Compartmentation (RED/BLACK) Penetrations (windows, air vents, access plates) Drawings, including an exploded view RF Gasketing

3.5.2Interface TechniquesSignal filtering Power filtering Location and mounting of filters Connectors/Junction Boxes

3.5.3Other Mechanical Design Featureswhich may have an impact on the TEMPEST characteristic of the unit

3.6RED/BLACK Designwhich shall include the following:

3.6.1RED/BLACK signalsRED/BLACK signal flow description and block flow diagram RED/BLACK power distribution description and block flow diagram RED/BLACK Logic (type, amplitude, and transition times) RED/BLACK Interfaces (signal amplitude, transition times, design considerations)

3.6.2Other RED/BLACK Design FeaturesPhysical RED/BLACK circuit layout (multi-layer boards, partitioning of circuits) Type of cables Grounds Clocks

3.7NONSTOP (if required)

3.7.1Transmitter CharacteristicsAntenna bandwidth RF output bandwidth IF bandwidth Baseband Bandwidth Type of modulation Signaling rate RF frequency band RF carrier power Sideband power

3.7.2List and description of circuits susceptible to RED signal coupling

References

—

Schema v3.0Community-maintained · Verify against ASSIST

Community-maintained — not an official government database.
Verify against ASSIST·GitHub·About·Disclaimer