GSM encryption, a 64-bit encryption algorithm which has been in use since 1988 to secure phone calls has been hacked. The news was announced at the Chaos Communication Congress Conference being held in Berlin where Karsten Nohl, an engineer, reported his findings. His method of cracking the code was through the use of brute force, using random strings of numbers until he was able to successfully guess the password.
The A5/1 privacy algorithm is a 64-bit key, but since 2007, there has been a 128-bit key known as A5/3 available for use. The problem is that the new encryption key is not widely used at this time and although more secure, it still has the same flaws as the 64-bit key, namely that it to could be hacked with brute force given enough time.
As it stands now, the GSM Association has responded to this news by advising that phone operators can use a modified 64-bit key for network security, but again, we are left with the same security holes. It should also be noted that having the correct code does not allow a hacker to eavesdrop on specific calls directly, but rather opens up the stream of digital information through which the hacker must navigate.
Via: Engadget, Gadget Venue
Gadget
News RSS
Email