What is the TEMPEST standard and how does it affect the shielding design of military RF equipment?
TEMPEST Standards for Compromising Emanation Protection
TEMPEST protection addresses a fundamentally different threat than standard EMI/EMC. While EMI control prevents your equipment from interfering with other systems, TEMPEST prevents your equipment from leaking intelligence to adversary surveillance. The specific shielding requirements and test procedures are classified, but the general principles are well understood.
Compromising Emanation Sources
- Display emissions: CRT and LCD displays emit RF correlated with the displayed content, previously demonstrated to be reconstructible at distances of 100+ meters (Van Eck phreaking)
- Processor emissions: Data bus and clock signals create RF emissions that may correlate with processed data, including cryptographic keys
- Cable emissions: Unshielded or poorly shielded cables act as antennas radiating data-correlated signals
- Power line conducted emissions: Data-correlated signals can couple onto power lines and propagate outside the secure area
TEMPEST Zones
TEMPEST protection requirements are based on the inspectable space (controlled area) around the equipment. Larger controlled areas (where adversary intercept gear cannot be placed) allow relaxed shielding requirements. Equipment intended for use in uncontrolled environments (like field-deployed military equipment) must meet the most stringent Zone A requirements, assuming interception can occur at very close range.
Design Countermeasures
TEMPEST-compliant design uses multiple layers of protection: data encryption before display or transmission, RED/BLACK separation (keeping classified and unclassified data streams physically and electrically separated), enhanced shielding of the enclosure exceeding standard EMI requirements, filtered power and signal connections at every enclosure penetration, and controlled routing of cables to minimize coupling between classified and unclassified conductors.
Specific values are classified (NSTISSAM TEMPEST/1-92)
General principle: SE > 60-100 dB from 1 kHz to 10+ GHz
Zone A: < 20 m, Zone B: 20-100 m, Zone C: > 100 m
Frequently Asked Questions
Is TEMPEST compliance required for all military RF equipment?
No. TEMPEST compliance is required only for equipment that processes classified information in environments where compromising emanations could be intercepted by adversaries. Standard military RF equipment that does not handle classified data (like a radar transmitter) must meet MIL-STD-461 for EMI/EMC but does not require TEMPEST compliance.
How does TEMPEST testing differ from MIL-STD-461 testing?
TEMPEST testing evaluates whether the equipment's emissions contain recoverable intelligence, not just whether they exceed a field strength threshold. The test procedures, limits, and pass/fail criteria are classified. TEMPEST testing is performed at government-approved facilities with specialized equipment and by personnel with appropriate security clearances.
What is RED/BLACK separation?
RED refers to classified (plaintext) signals and BLACK refers to encrypted (ciphertext) signals. TEMPEST design requires strict physical and electrical separation between RED and BLACK circuits to prevent classified data from coupling onto unclassified outputs. This includes separate power supplies, separate cable routing, and physical barriers within the enclosure. Minimum separation distances between RED and BLACK conductors are specified in the classified TEMPEST standards.