NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 28 of 32
From Bletchley to the battlefield: Crypt-Key and the evolution of UK cyber defence
In an era defined by geopolitical uncertainty and relentless cyber threats, Crypt-Key has quietly but decisively shaped the UK's national security posture.
Often operating behind the scenes, Crypt-Key is the cryptographic engine that secures the UK’s most sensitive information across defence, government, and international operations. It’s not just a tool – it’s a strategic capability. And in 2025, it is as important as ever that this work continues to evolve and keep pace with changing threats and emerging technologies.
This important capability is built on a legacy of excellence. Throughout its history, GCHQ has attracted and developed world-class expertise in information assurance and security, notably in cryptography. From its origins in 1919, through the legendary work at Bletchley Park, to the pioneering creation of public key cryptography by James Ellis and colleagues in the 1960s, the UK has consistently been at the forefront of cryptographic innovation. Crypt-Key is built on that legacy, and we must continue to evolve, operationalise and deploy to meet today’s most complex security challenges.
Crypt-Key predates the internet, yet it remains at the forefront of cyber defence. Designed to withstand the most advanced and persistent threats, it operates in highly contested environments, from battlefield networks to government communications. Its ubiquity across military platforms and civil infrastructure speaks to its enduring relevance.
But Crypt-Key is not standing still. Under the leadership of the NCSC, it is evolving to meet new challenges. In 2025 alone, the NCSC approved a dozen new Crypt-Key products and variants for operational use, each one reflecting the UK’s commitment to staying ahead of the threat curve.
Growth through sovereign capability
One of the most striking developments this year is the acceleration of Crypt-Key innovation through UK industry. The NCSC now partners with four specialist UK suppliers to develop the next generation of network cryptographic devices. These technologies are not only securing classified UK networks, they’re being adopted by friendly governments, turning Crypt-Key into a quiet export success story.
The approval of the first Secure Key Management (SKM) component marks a major milestone. For the first time, the UK has full over-the-network keying capability(1), dramatically enhancing operational flexibility and resilience. This growth reflects a strategic focus on high-tech investment, sovereign capability, and the 'edge' of the UK’s domestic cyber ecosystem that leads on the global stage.
Global standards, international trust
Crypt-Key is also a diplomatic asset. In 2025, the NCSC led a landmark demonstration of secure interoperability between approximately 20 secure voice crypto devices from eight NATO nations. Powered by Crypt-Key standards developed in the UK, this achievement underscores Britain’s leadership in setting the benchmarks for secure multinational communications.
The NCSC continues to work closely with allied national security agencies to ensure mutual confidence in the protection of shared information. In an increasingly interconnected world, trust in cryptographic standards is not just technical – it’s strategic.
Joint delivery for the next decade
The Joint Crypt Key Programme (JCKP), jointly led by the Ministry of Defence (MOD) and the NCSC, is delivering key management solutions to support operational access to Crypt-Key protected networks. This includes future defence platforms such as the Future Combat Air System (FCAS), where Crypt-Key remains a core component of secure communications.
The NCSC’s leadership in design and assurance ensures these solutions meet the operational demands of the next decade and beyond. The integration of Crypt-Key into major defence programmes reflects its centrality to the UK’s long-term strategic planning.
Operational backbone and resilience
Beyond development, Crypt-Key is a daily operational reality. The NCSC provides critical support through entropy generation and key provision, enabling mission and network managers to control access to protected services. In 2025, the UK Key Production Authority (UKKPA) produced thousands of operational keys across a wide range of Crypt-Key systems, ensuring continuity and resilience.
Investments in secondary sites and contingency capabilities are also underway, reinforcing the UK’s ability to maintain secure operations under any circumstances.
Meeting the challenge head-on
As the UK deepens its investment in cyber resilience and technological growth, Crypt-Key stands out as a quiet but powerful enabler. It secures the nation’s most critical systems, supports international trust, and drives domestic innovation. In 2025, Crypt-Key is not just keeping pace but setting the pace. And in doing so, it’s helping to shape a future where the UK remains a global leader in cyber defence.
Crypt-Key is not without its challenges. It demands constant vigilance, technological agility, and strategic foresight. The NCSC continues to navigate this complex area, guided by clear priorities: strengthening UK industry partnerships, enhancing interoperability with allies, driving innovation in cryptographic design and ensuring resilient delivery across defence and government.