Holiday Gift Guide »

Ultrabrief: 3G GSM encryption cracked, insert sensational headline [you're fine]

Categories: Research
By: , IntoMobile
Friday, January 15th, 2010 at 7:25 AM

Orr Dunkelman, Nathan Keller and Adi Shamir have cracked the encryption used to protect 3G GSM calls. It really doesn’t mean anything since it’s still terribly inefficient and if anyone really wanted to spy on you there are age old techniques that are far superior. In case you want to read their report, click here. If you know what any of the following text below means, then the FBI would like to have a word with you:

Abstract: The privacy of most GSM phone conversations is currently protected by the 20+ years old A5/1 and A5/2 stream ciphers, which were repeatedly shown to be cryptographically weak. They will soon be replaced in third generation networks by a new A5/3 block cipher called KASUMI, which is a modified version of the MISTY cryptosystem. In this paper we describe a new type of attack called a sandwich attack, and use it to construct a simple distinguisher for 7 of the 8 rounds of KASUMI with an amazingly high probability of $2^{ -14}$. By using this distinguisher and analyzing the single remaining round, we can derive the complete 128 bit key of the full KASUMI by using only 4 related keys, $2^{26}$ data, $2^{30}$ bytes of memory, and $2^{32}$ time. These complexities are so small that we have actually simulated the attack in less than two hours on a single PC, and experimentally verified its correctness and complexity. Interestingly, neither our technique nor any other published attack can break MISTY in less than the $2^{128}$ complexity of exhaustive search, which indicates that the changes made by the GSM Association in moving from MISTY to KASUMI resulted in a much weaker cryptosystem.

About The Author

Stefan Constantinescu

Stefan Constantinescu (@WhatTheBit on Twitter) has loved technology since as far back as he can remember. It started with computers, but in the past few years his passion has turned to mobile devices. As a mobile phone enthusiast who lives and breathes devices that connect to the internet, he knows he is not alone with this radical fascination of all things wireless. He is strongly opinionated and enjoys a good debate so leave comments in his posts and he’ll get back to you! Stefan began blogging as a hobby in the fall of 2006 and joined IntoMobile in the summer of 2007. Later he got a job at Nokia in March 2008, but as of June 2009 he has rejoined the IntoMobile team. He is currently based out of Helsinki, Finland.