Showing posts with label GSM. Show all posts
Showing posts with label GSM. Show all posts

Monday, January 11, 2010

GSM encryption code cracked wide open, leaked to the Internet

This is the headline to Boy Genius Report’s (BGR’s) article regarding a group of 5 hackers that claim to have cracked a 64 bit GSM encryption scheme. While their headline implied doom and gloom for security engineers around the world, the content of the article is more reasoned and accurate. According to BGR, “it is important to point out that the GSM algorithm that was cracked was the older and less secure 64-bit A5/1 algorithm, not the newer 128-bit A5/3 algorithm.” Other news sources also report that the cracked codes still require thousands of dollars of computer and radio equipment to access the wireless conversations they want to compromise. What is left out of the article is actually more important than what is said. Let’s cover what BGR did not.

The 64-bit A5/1 algorithm is only used to scramble voice conversations on older GSM equipment. This means that:

Good News
1) Your data transmissions are not impacted by this development.
2) Calls made with a 3G capable phone over a 3G connection are not impacted.
3) According to some sources, T-Mobile has converted its entire network to the newer encryption algorithm.
4) The same sources claim that AT&T has converted part, but not all, of its network to the newer encryption algorithm.
5) There are 3 pillars to information security. The pillar that this development impacts is Access, or the ability to listen to a voice conversation. It doesn’t impact Integrity or Identification. This means that no one can make phone calls or data transmissions posing as you. This also means that no one can alter your voice or data transmission.

Bad News
1) Because newer network equipment is designed to work with older handsets, even the latest in network equipment will accept the older algorithm. This means that any GSM user with an older handset (manufactured before 2007) may still be susceptible to eavesdropping even if the carrier (T-Mobile, AT&T, etc.) has upgraded the encryption algorithm in that area of their network.

In a nutshell, only very sophisticated and well funded criminal organizations will have the means to eavesdrop on your calls. Even if they try, they need to be very close to you to intercept your radio signal. They may need to be within feet of you in some buildings to within miles in some rural areas. They also need to catch you while your call is being handled by an older AT&T cellular site or they need to catch you while you are using an older model phone. Lastly, your conversation needs to be of such value that a very sophisticated and well funded criminal organization would want to go through all of the trouble we have outlined in order to listen in. If you regularly partake in these kinds of conversations, I would suggest you look into buying a TalkSecure Wireless phone from General Dynamics (http://www.gdc4s.com/content/detail.cfm?item=90bdc199-8775-4439-9b83-c021dc7e9e76) it runs your conversation through another 128-bit encryption algorithm on top of the one used by the carrier.

If you don’t partake in these kinds of conversations, I really wouldn’t worry about it.

Wednesday, January 23, 2008

Verizon Opens Up?

A Windows Mobile perspective

Have you heard the news? Verizon Wireless is going to open its wireless network to phones using GSM technology. This is big news for Pocket PC users because some of the new Pocket PC phones will work with your choice of wireless carrier, as long as your carrier uses GSM. You see Verizon and Sprint use CDMA for their network technology. There is nothing wrong with CDMA except that GSM (Global System for Mobile) is the de-facto wireless standard outside of the United States. So how do I know this is going to happen, a Vodafone spokesperson said so. Who is Vodafone? Vodafone is owner of 45% of Verizon Wireless and one of the biggest GSM network operators in the world. When asked when Verizon planned to implement their break with CDMA, Verizon’s spokeswoman said “We are talking 2004, 2005. By that point who knows what will happen.”

Huh?

Sorry, I was stuck in a bit of a time warp. You see the previous paragraph describes actual news from 2001. Despite Vodafone’s pushing and prodding, Verizon didn’t switch to GSM technology in 2001, 2004 or 2005. But, if you haven’t heard, Vodafone is pushing Verizon to toy with GSM technology yet again. Vodafone and Verizon have jointly announced their intention to trial LTE (Long Term Evolution) technology. This is the 4th generation choice of the GSM community.

So, why is Verizon entertaining a move to GSM again in 2008? It makes sense from a business operations standpoint. Vodafone and Verizon have been fighting over technologies since their marriage in 1999. Vodafone even courted the old AT&T Wireless before it was acquired by Cingular. To work towards common goals instead of different ones will help both companies run more efficiently. It also makes sense that Verizon would explore other network options since Sprint has already announced its break from CDMA for the world of WiMax for its 4th generation technology. If Verizon stayed the course with CDMA technologies, it would account for the vast majority of U.S. CDMA sales. On one hand, it would give them control over which handsets they wanted from whichever manufacturers that they chose. On the other hand, as one of the last holdouts in the CDMA camp, the number of manufacturers willing to bet their futures on one large customer would surely dwindle. In effect, Verizon would be the big fish in a small and shrinking pond. Now, this may not sound bad to some CEOs, but there is another reason to question Verizon’s loyalty to CDMA going forward.

Up to this point, I have discussed “openness” as it pertains to network technology, or, which handsets work on which networks. Another aspect of “openness” in the wireless world pertains to handset technology, or, what applications work on what handsets. This may seem like a moot point for those of us in the Windows Mobile world. For the most part, Pocket Outlook works the same on a Sprint Touch as it does on the unlocked HTC Touch. The fact of the matter is that a lot of development goes on behind the screen to make sure that you see it that way. Because the wireless technologies are different between GSM and CDMA, so is the coding for some bandwidth intensive applications. If the people who develop new applications could focus on one technology instead of two, manufacturers and wireless carriers would spend a lot less time on handset and application testing. If Verizon becomes the lone CDMA carrier in the U.S., even more developers and handset manufacturers will choose to focus on just one technology, and it won’t be CDMA.

So, what are the benefits to you if Verizon does change to a GSM technology? The most important benefit for everyone is “openness”. O.K., that sounds sort of existential. Let me explain. For over a decade, wireless phone users around the world have been able to buy the handset they wanted and use it with the carrier they wanted. While this freedom is more a result of an open business model than a network infrastructure, GSM and its SIM card technology have been enablers of that freedom. This openness is evident in the number of “unlocked” GSM Windows Mobile devices that are featured in this magazine every issue. If Verizon moves to a GSM technology, a world of devices will be opened up to their customers. The expanded product line for Verizon, combined with its willingness to let you bring another carrier’s handset with you as a customer will give you, as prospects or customers, more choices in handsets and carriers. To summarize my existential start to this section, more openness for Verizon equals more choices for you, the customer.

Will Verizon move to LTE and the GSM family? I don’t really know. As we have discussed, there are a lot of good reasons for them to do so. Then again, most of these reasons are the same reasons for Verizon to do it 7 years ago. Despite all of the posturing of Verizon towards GSM, a Verizon Wireless spokesman recently emphasized that the company is “working closely with Vodafone for next-generation technology. We have not made a technology decision.”