AOA Forums AOA Forums AOA Forums Folding For Team 45 AOA Files Home Front Page Become an AOA Subscriber! UserCP Calendar Memberlist FAQ Search Forum Home

Go Back   AOA Forums > Software > Data Security

Data Security Viruses, Firewalls and Safe computing

LinkBack Thread Tools Rate Thread
  #1 (permalink)  
Old 31st December, 2009, 07:54 PM
Daniel ~'s Avatar
Chief BBS Administrator
Join Date: September 2001
Location: Seattle Wa.
Posts: 45,606

After 21 Years, GSM Encryption is Cracked Putting 3.5B Users at Risk

Written by Daniel
Thursday, 31 December 2009 18:48

The cat's out of the bag -- after 28 years the 64-bit A5/1 algorithm that encrypts over 3.5 billion users' cell phone traffic, has been cracked and the results published. [Front page...]
"Though all men live in ignorance before mystery,
they need not live in darkness...
Justice is foundation and Mercy ETERNAL

"All that we do is touched by Ocean
Yet we remain on the shore of what we know."
Richard Wilbur

Subscribers! Ask Pitch about a Custom Sig Graphic

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 4th January, 2010, 05:37 PM
Chief Systems Administrator
Join Date: September 2001
Location: Europe
Posts: 13,075

A5/1 is one of several algorithms used to protect speech on a GSM network. One other alternative is A5/3, which uses 128bit encryption. Incidentally, A5/3 is already used to protect GPRS traffic (data, rather than voice).

However, GSM has some serious design deficiencies that mean it's not really suitable for secure communications. For example, GSM requires a mobile phone to authenticate to the network before it can operate. There's no provision for the network to authenticate to the mobile phone, so you have no idea who's network you're actually connected to. That could well be an easier attack than breaking the encryption used.

UMTS (3G) uses a different cipher, and currently stands up to cryptoanalysis. Ultimately, it is a matter of time before a form of encryption is broken. An attack that takes 100 years with this year's hardware will only take 50 years with next year's hardware.

The A5/1 encryption used has survived pretty well, given how much more powerful computers are now than they were 21 years ago. 21 years ago, the 8086 was just about around, as was the 68000.

Last edited by Áedán; 4th January, 2010 at 05:38 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 4th January, 2010, 06:30 PM
danrok's Avatar
AOA Staff
Join Date: March 2003
Location: Great Britain
Posts: 18,917

I would have thought cordless landline phones are the real weak link?

And, just about everyone uses cordless phones now.
Desktop PC: AMD FX-8370E / Asus M5A99X Evo R2.0 Motherboard / 16GB DDR3 RAM / GeForce GTX 970
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Unholy trinity of flaws put Google users at risk danrok Data Security 0 24th September, 2007 10:45 PM
Putting a Peltier on my AGP 6600GT QSDT Graphics and Sound cards; Speakers and other Peripherals 6 20th September, 2005 11:45 PM
Members putting out WUs who I don't know. mookydooky ThunderRd's AOA FOLDING@HOME Team 9 28th June, 2004 08:20 AM
Putting a HD in an external 3.5inch bay? ganja123 EPoX MotherBoards 1 5th October, 2002 02:19 AM
Putting a computer in a car Claudius General Hardware Discussion 34 25th June, 2002 09:55 PM

All times are GMT +1. The time now is 02:32 PM.

Copyright ©2001 - 2010, AOA Forums
Don't Click Here Don't Click Here Either

Search Engine Friendly URLs by vBSEO 3.3.0