The Government has offered Australia's three mobile operators, and vividwireless, renewal of their existing spectrum allocated on 15 year licences in the late 90s and early 2000s at set prices, while the Government expects to rake in $3 billion.
read more
David Heath
Friday, 01 January 2010 12:06
Security researchers have long considered GSM security to be weak and there have been many projects aimed at exposing a variety of these security weaknesses.
There are four levels of encryption available for GSM, discussed in detail here. Many countries were not given access to any form of encryption (a screen shot of a phone without security is shown here; go to the sub-heading 'Security') and only the most friendly (mainly Western Europe and USA) were given access to the strongest (called A5/1).
Australia was not considered a favoured country and was only permitted to implement the fully broken A5/2 protocols.
The Wikipedia article gives good detail of the history of attacks on A5/1. There is an interesting report from 1994 of the political in-fighting which led to the selection of the knowingly weak French solution over the strong objections of the Germans who (at the time) shared a border with a number of communist countries and would have preferred very strong encryption.
A recently reported project to create rainbow tables for GSM decryption has reached its end – the tables are available and at just 2TB, are smaller than expected.
Karsten Nohl's presentation at 26C3 outlines the work completed thus far and also describes early efforts to fully crack the supposedly more secure A5/3 protocol. Much of the project management is being handled through the Trac site where news, source code and other resources are available.
What advice is the GSM Industry group offering? Read on...

|
Microsoft Office 365Try an easy-to-use set of web-enabled tools for business-class productivity services. Office 365 provides anywhere-access to email, important documents, contacts, and calendars on almost any device. |