Topic: 3G Networks Encryption Gets Hacked (KASUMI, MISTY, sandwich & practical attack)

[Samker]

Let’s forget for a second the whole Google vs China incident and don’t get to panicky about everything. Instead let’s focus our attention on 3G networks security. Why do I say that? Because it looks like that 3G network encryption has been cracked. What does it mean to you and me? Absolutely nothing, at least for now.

Not too long ago we heard that GSM cellphones were vulnerable to attacks as the whole GSM 64-bit A5/1 algorithm was cracked. What followed was only natural. 3G encryption was next and, unsurprisingly, 3G encryption has been beaten. It looks like 3G networks rely on a KASUMI system that only needs a couple of hours from a well coordinated hacker to be cracked.

Will the GSMA do anything about it? Well there is a MISTY encryption which is a more complicated version capable, in theory, of keeping us safe. But then again human mind is very ingenious and it will find away to hack that one too.

Fortunately for us the hacking has been done by researches that employed a highly complex math system to crack the 128-bit key. In fact they say that unoptimized implementation on a single PC recovered about 96 key bits in a few minutes, and the complete 128 bit key in less than two hours.” With some extra optimization the process could be even quicker although that shouldn’t affect regular users like you and me.

Unless you have secrets to hide then you shouldn’t be worried. If you do have the kind of secrets that other people want to find out then this 3G encryption hack is the least of your problems. There are other easier ways to spy on people especially with the modern technology available today. So, you know, stop discussing everything over the phone! Instead go to the shower with your friends and leave the water running while you’re whispering to each other. That will teach them not to pry!
Read: http://eprint.iacr.org/2010/013

(TFTS)