Feeds

Mobile operators pooh-pooh universal phone-snooping plan

'What, us worry?'

SANS - Survey on application security programs

Mobile operators have struck back at organizers of an open-source project that plans to crack the encryption used to protect cell phone calls, saying they are a long way from devising a practical attack.

"The theoretical compromise presented at the Black Hat conference requires the construction of a large look-up table of approximately 2 Terabytes - this is equivalent to the amount of data contained in a 20 kilometre high pile of books," the group, which represents almost 800 operators in 219 countries, said in a statement issued Friday. "In theory, someone with access to the data in such a table could use it to analyse an encrypted call and recover the encryption key."

The GSMA went on to say that even if such a table were built, the researchers still would need to build a complex radio receiver to process the raw radio data.

The vast majority of world's cell phone calls are protected by an algorithm known as A5/1 that has been in existence for more than a decade, said project leader Karsten Nohl, a cryptography expert and a researcher at the University of Virginia. Because it hails from the cold-war era when export laws prohibited the exportation of strong cryptography, the cipher is relatively trivial to break using a large number of networked computers.

More recently, cell phone makers have folded a newer cipher known as A5/3 into handsets to protect internet communications. Because its key is twice as long as A5/1, it's about a quintillion times harder to break, Nohl estimates. But despite the uncontested superiority of the newer algorithm, handset manufacturers still cling to the older one to protect voice calls.

"This is cold war stuff," Nohl told The Register in explaining why he spearheaded the project, which plans to use a distributed, peer-to-peer computing system to create the table needed to crack A5/1. "I don't see why I should be using something that was intentionally weakened during the cold war."

Indeed, in many respects, the GSMA's statement reads like a relic from the 1960s, when it was still fashionable to believe that arcane and proprietary technologies were sufficient to thwart determined hackers from breaking into protected systems.

"The complex knowledge required to develop such [signal-processing] software is subject to intellectual property rights, making it difficult to turn into a commercial product," it states.

The statement said the GSMA is phasing in A5/3, but provided no timetable or other details.

The GSM rainbow table project was announced at the recent Black Hat security conference in Las Vegas.

Nohl has already proved to be adept at defeating such security-through-obscurity defenses. In late 2007, he unveiled a practical attack on the world's most popular smartcard. For decades, Netherlands-based NXP Semiconductors relied on a proprietary algorithm to protect its widely used Mifare Classic wireless card.

"I'm puzzled by the GSMA's attempt to hide behind the alleged inability of hackers to snoop GSM traffic," Nohl wrote in an email to reporters. "This is 20 years old technology that ships in billions of handsets. The GSMA should take the hacker community and its current interest in GSM technology more serious." ®

Combat fraud and increase customer satisfaction

More from The Register

next story
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.