Printed from http://www.electronista.com

Tougher GSM, 3G security cracked

updated 12:05 pm EST, Tue January 12, 2010

Newer GSM encryption hit using sandwich attack

The security of GSM phone calls dropped again late Monday with word that the standard's second, more guarded encryption standard has been broken. Following a first crack of the simpler standard, researchers at the Weizmann Institute of Science say they have cracked the A5/3 security cipher (nicknamed Kasumi) by using what's known as a "sandwich" attack. The group accomplished its goal by creating a distinguishing trait for the key and using just four related keys to determine the key for Kasumi itself.

While breaking the security takes time, the approach theoretically leaves GSM more directly exposed to call interceptions and other threats. Most cellular carriers still use the lower-grade GSM quality (A5/1) as their base calling technology, but the new discovery makes switching to Kasumi impractical. UMTS, the 3G cousin to GSM, also uses Kasumi and is potentially exposed as well.

The threat isn't necessarily large as its dependence on related keys requires discovering those keys before an attack is an option. Still, the technique is described as "practical" by one observer and could be used for actual attacks.

Members of the GSM Association haven't responded to the newly discovered hole.



By Electronista Staff
toggle

Comments

  1. Fast iBook

    Fresh-Faced Recruit

    Joined: Mar 2003

    0

    Um...

    What is the point of this "cracking" anyways? I doubt anyone wants to listen to vapid conversations, fone s** & other routine call types. Anyone worth targeting could just as easily switch to sat phones.

    - A

  1. h8jellybeans

    Fresh-Faced Recruit

    Joined: Jan 2010

    0

    easier to crack phones like this

    even voice encryption does not stop it.

    this video shows you how to crack calls

    http://www.youtube.com/watch?v=KHDXtnGNm64

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

Asus Chromebook C300

When Chromebooks hit the market back in 2011, consumers didn't know what to do with them. The low-cost laptops, powered by Google's Ch ...

Plantronics BackBeat Pro Bluetooth headphones

Looking for a pair of headphones that can do everything a user requires is a task that can take some study. Trying to decide on in-ear ...

Lemur BlueDriver

"Oh no, the check engine light is on…again! What one of the hundreds of reasons could it be this time? Probably going to cost a fort ...

Sponsor

toggle

Most Commented

 
toggle

Popular News