Dean Procter

Encryption used in most GSM networks cracked and available

I didn't get to wait until the New Year for those GSM mobile phone conversations and phone banking sessions to become even more accessible to criminals (it is unlawful to intercept mobile communications in most civilised countries, however even governments don't seem to pay any attention to that one so criminals aren't likely to either):

NYTimes GSM de-encryption available.

Perhaps if your mobile communications are valuable to anyone you might have a discussion with your carrier.

I know of at least one mobile transaction and authentication system unaffected, but the ability of criminals to listen to conversations within minutes may cause a little distress for some others' applications.

The soft encryption used by most GSM networks needed to be upgraded ages ago to 128 bit. The purpose of the public release of the rather too quick and easy to crack keys is designed to press the issue. Meanwhile as carriers lag behind their customers may be at risk. Conversations can be replayed within hours by an amatuer and within minutes by better equipped and knowledgeable attackers.

No doubt the tabloids will be the recipients of some juicy tidbits before very long and spotting the Woody will reach new heights.

My latest blog posts
Thank you Andrew Haldane 2597 views : 0 comments
NATO persecution update 5917 views : 0 comments
There's no security like no security. 5564 views : 0 comments
Groups I founded
I have not founded any groups yet.
Groups I belong to
Information Security : David Spinks : 71 members
Going green : Peter Roberts : 30 members
Whatever... : Steve Ellis : 44 members
Futuristic Banking : 92 members
Online Banking : Shripad Vaidya : 148 members
Innovation in Financial Services : Elton Cane : 273 members