6

I would like to have general infos about crypto and commom SIM card in mobile phone(I know there may be different implementations, technos according to the operator...).

  • Is crypto used only for authentication ?
  • Is crypto used also for encryption ? symmetric encryption ?

I heard about a private key embedded in it for authentication, but what about encryption, which seems as important.

Improve this question
1

1 Answer 1

Reset to default
6

It's been a while since I researched this topic, however, several algorithms exist. At the time of my research (3 years ago), the A5 algorithm was the most used algorithm in Europe for phone and sms conversations (GPRS used a different algorithm). Several variations exist:

  • A5/0
  • A5/1: most widely used (deemed the most secure of the three), but cracked by Karsten Nohl in 2009-2010
  • A5/2

I am not sure if these algorithms are still in use, but I assume the encryption/authentication is still done in a similar manner. Update: the 3G and 4G are probably a lot safer. However, operators often fallback to 2G for normal calls/SMSes. The A5/3 algorithm (aka KASUMI) is said to be used in 3G communications. KASUMI is much harder to crack, and thus it is more simple for the NSA to go and steal the keys. Update 2: by operating a jamming device, agencies have reportedly disrupted 3G/4G communications, causing nearby phones to fall back to crackable 2G.

Authentication To decide whether or not the SIM may access the network, the SIM needs to be authenticated. A random number is generated by the operator, and is sent to the mobile device. Together with the secret key Ki, this random number runs through the A3 algorithm (it is this Ki that recently has been compromised). The output of this calculation is sent back to the operator, where the output is compared with the calculation that the operator has executed himself (the operator possesses the secret keys for all SIM cards the operator has distributed).

Encryption This part is the part that has been cracked. In short, the operator generates a random number (again), and sends it to the mobile phone. Together with the secret key Ki, this random number runs through the A8 algorithm, and generates a session key KC. This KC is used, in combination with the A5 algorithm to encrypt/decrypt the data.

SIM encryption

Note: the figure is from a paper by SANS institute, and the explanation of the A5 algorithm crack is based on the presentation of Karsten Nohl. I cannot seem to find a valid link to both of these papers at the moment.

Improve this answer
10
  • Better answer than mine! I would like to get a review about the those algorithms too in a Mathematical sense. Is there any implementations without private keys?
    – Léo Léopold Hertz 준영
    Commented Feb 20, 2015 at 13:59
  • 1
    The A5 algorithm is based on symmetric encryption. I suppose a public-private key (asymmetric encryption) setup (same as is used in HTTPS connections) could be used. However, asymmetric encryption was introduced because of the key-distribution problem. As the operator is able to control the SIM card, I don't think that asymmetric encryption is a better solution. A secret will always exist somewhere.
    – Michael
    Commented Feb 20, 2015 at 14:01
  • @Michael Maybe symmetric crypto is also used because it is cheaper to implement and for performance issue (phone conversation needs real time processing), am I right ?
    – crypto-learner
    Commented Feb 20, 2015 at 14:40
  • @crypto-learner Communication based on asymmetric encryption typically also makes use of symmetric keys. Only the symmetric key is exchanged using asymmetric encryption. The symmetric key is then used during the lifetime of the session.
    – Michael
    Commented Feb 20, 2015 at 14:47
  • @Michel yes you are right... but there could be performance issue because of negociations involving asymmetric first exchanges ?!
    – crypto-learner
    Commented Feb 20, 2015 at 15:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .