Little is known publicly about the algorithm itself due to its classified nature and inclusion in the NSA's Suite A. Some documentation related to the KYK-13fill device and statements made by military officials confirm that SAVILLE has a 128-bit key, which consists of 120 key bits and an 8-bit checksum. Furthermore, it is known that SAVILLE has two modes of operation: Autonomous Mode (also known as Key-Auto-KEY or KAK) and Autoclave Mode (also known as Cipher-Text Auto Key or CTAK).[1] On the AIMmicrochip, it runs at 4% of the clock rate (compare DES at 76% and BATON at 129%). The Cypris chip mentions two modes; specifications for Windster and Indictor specify that they provide Saville I.
Some devices and protocols that implement SAVILLE: