After a few quick searches for 3G security I was able to learn that this standard uses the KASUMI block cipher, of which several weaknesses have been identified (although apparently none of practical use in decrypting 3G traffic?). Anyway, this made me curious - what kinds of security measures are in place for 4G LTE?
asked Oct 10, 2012 at 14:41
Add a comment
|
3 Answers
Information regarding the current implementation of "4G" LTE, as well as the soon to be deployed true 4G LTE-A, can be found at the European Telecommunications Standards Institute (ETSI) website and portal.
3G networks use the KASUMI block cipher with the UEA1 confidentiality and UIA1 integrity algorithms. As you said, there have been several demonstrated weaknesses, which has prompted the use of a new cipher / algorithm.
The 4G LTE successor is the SNOW 3G stream cipher and the UEA2 confidentiality and UIA2 integrity algorithms. To quote the specs page:
SNOW 3G is a word-oriented stream cipher that generates a sequence of 32-bit words under the control of a 128-bit key and a 128-bit initialisation variable. These words can be used to mask the plaintext. First a key initialisation is performed, i.e. the cipher is clocked without producing output, see 4.1. Then with every clock tick it produces a 32-bit word of output.
-
2None of the "weaknesses" in KASUMI are of any relevance to the security of 4G in practice, so talking about weaknesses of KASUMI in this context is (I think) misleading.– D.W.Oct 11, 2012 at 15:08
-
@D.W. According to ETSI, that was one of their reasons for choosing SNOW over KASUMI (I cannot find the direct quote at the moment).– MosesOct 11, 2012 at 15:58
-
Unfortunately, it seems that all of the links in this answer are broken. The first 2 return 404's, the last two never loaded for me.– mikeazoJul 20, 2015 at 13:28
At a high level, 4G uses symmetric-key cryptography to (1) authenticate the subscriber (phone), and (2) encrypt data sent over the 4G wireless link.
While there have been academic "weaknesses" in KASUMI found, none of them have any practical relevance to the security of 4G in practice. For instance, one of the known "weaknesses" is a related-key attack. However, related-key attacks are only of relevance if the system uses the block cipher in an inappropriate way. 4G does not make this mistake, so related-key attacks are of no relevance. As Wikipedia says, "The authors note that this attack may not be applicable to the way A5/3 is used in 3G systems" (and the same applies to 4G).
The primary weakness in 4G security is that its use of cryptography does not provide end-to-end security. It only encrypts the traffic between the phone and the base station, but there is no encryption while the data is communicated over the wired network. This means that there is no security against a malicious or compromised carrier (or a carrier who is sharing all of your data with the local government), and no security for your data when it transits the Internet or the rest of the path. So, if you want security for your data, you need to do your own end-to-end encryption, e.g., using SSL/TLS, SSH, a VPN, or a similar mechanism.
-
2I don't think anyone would expect their data to be secured while transmitting over standard HTTP, so I wouldn't call that a weakness of 4G.– MosesOct 11, 2012 at 16:01
-
-
1
To certain extent, LTE provides "somewhat" end to end security. Contrary to what @D.W said, (I am assuming what he meant by wired network is probably core network - i.e. after base stations), 4G/LTE would use Diameter protocol and hence IPSec. So the legacy Signalling System no. 7 (SS7) like core network protocols will be replaced in LTE and hence authentication along with hop-to-hop access control is in place at least as per the specification.
-
"This means that there is no security against a malicious or compromised carrier (or a carrier who is sharing all of your data with the local government), and no security for your data when it transits the Internet or the rest of the path" still applies, so your point is moot. Jun 15, 2015 at 13:28
-
Yes. For that an attacker not necessarily be a compromised carrier: it would be enough if he has an cracked edge device such as Femtocells. If you have access to core network, one can play around as that is how telecommunication system is built. Its worse in case of SS7, but Diameter is somewhat better is my point. Jun 15, 2015 at 16:35