3G Wireless Security By: Bill Barker

Overview What is 3G Wireless? What is 3G Wireless? HSPA HSPA Feistel Encryption/Decryption Feistel Encryption/Decryption KASUMI KASUMI Future Advances/4G Future Advances/4G

What is 3G Wireless? 3G is the third generation of mobile phone standards 3G is the third generation of mobile phone standards 3G is intended for “smartphones” 3G is intended for “smartphones” Blackberry Blackberry iPhone iPhone Etc. Etc.

What is 3G cont. 3G increased bandwidth and transfer rates 3G increased bandwidth and transfer rates Web-based applications Web-based applications Phone-based audio and video files Phone-based audio and video files 3G’s uses: 3G’s uses: Sending and receiving large multimedia files Sending and receiving large multimedia files Downloading info from the internet Downloading info from the internet

What is 3G cont. 3G’s uses continued: 3G’s uses continued: Video Conferencing Video Conferencing Streaming video for the Web Streaming video for the Web Sending and receiving faxes Sending and receiving faxes December 2007: 190 3G networks in 40 countries with 200 million customers, only 6% of the 3 billion mobile phone customers December 2007: 190 3G networks in 40 countries with 200 million customers, only 6% of the 3 billion mobile phone customers

HSPA HSPA - High Speed Packet Access HSPA - High Speed Packet Access HSDPA - High Speed Downlink Packet Access HSDPA - High Speed Downlink Packet Access HSUPA - High Speed Uplink Packet Access HSUPA - High Speed Uplink Packet Access HSPA: HSPA: Increases peak data rates Increases peak data rates Provides more system capacity Provides more system capacity Reduces latency Reduces latency

HSDPA Peak data rate of 14 Mbps vs. 1.8 Mbps Peak data rate of 14 Mbps vs. 1.8 Mbps Download large files 20x faster Download large files 20x faster 5x system capacity 5x system capacity

HSUPA Peak data rate of 5.8 Mbps vs Mbps Peak data rate of 5.8 Mbps vs Mbps Upload large files 10x faster Upload large files 10x faster 2x system capacity 2x system capacity

HSPA Increased system capacity makes it cheaper for service provider to offer service Increased system capacity makes it cheaper for service provider to offer service Latency reduced from 70 ms to 50 ms Latency reduced from 70 ms to 50 ms Gives user faster responses in applications Gives user faster responses in applications

Feistel Encryption Encryption Encryption Plaintext split in half Plaintext split in half Sub-key applied with function F Sub-key applied with function F Output XOR Output XOR Two halves switched Two halves switched Repeated Repeated After last round halves not switched After last round halves not switched

Feistel Encryption

Feistel Decryption Decryption Decryption Ciphertext split in half Ciphertext split in half Sub-key applied with function F in reverse Sub-key applied with function F in reverse Output XOR Output XOR Two halves switched Two halves switched Repeated Repeated After last round halves not switched After last round halves not switched

Feistel Decryption

KASUMI Encryption used for confidentiality and integrity in 3G mobile devices Encryption used for confidentiality and integrity in 3G mobile devices Hardware based encryption Hardware based encryption Feistel structure with 8 rounds Feistel structure with 8 rounds

KASUMI 64-bit data blocks 64-bit data blocks 128-bit encryption key 128-bit encryption key 64-bit ciphertext 64-bit ciphertext

Future Advances/4G Fully IP-based Fully IP-based Higher speeds Mbps – 1 Gbps Higher speeds Mbps – 1 Gbps Verizon – LTE Verizon – LTE Sprint/Nextel - WiMAX Sprint/Nextel - WiMAX

LTE LTE – Long Term Evolution LTE – Long Term Evolution Peak Data Rates: Peak Data Rates: Downlink – 100 Mbps, Uplink – 50 Mbps Downlink – 100 Mbps, Uplink – 50 Mbps Latency 5 ms Latency 5 ms Projected for Projected for

WiMAX WiMAX – World Interoperability for Microwave Access (IEEE ) WiMAX – World Interoperability for Microwave Access (IEEE ) Peak Data Rate – 70 Mbps Peak Data Rate – 70 Mbps Range – 30 miles from base station Range – 30 miles from base station

WiMAX Cont. Vulnerable to Man-in-the-Middle attacks Vulnerable to Man-in-the-Middle attacks No base station authentication No base station authentication Vulnerable to DoS attacks Vulnerable to DoS attacks Available in some areas currently Available in some areas currently Baltimore Baltimore Washington DC Washington DC

Recap What is 3G? What is 3G? HSPA HSPA HSDPA – 14 Mbps HSDPA – 14 Mbps HSUPA – 5.8 Mbps HSUPA – 5.8 Mbps Latency – 70 ms to 50 ms Latency – 70 ms to 50 ms Feistel Encryption/Decryption Feistel Encryption/Decryption KASUMI KASUMI 8 round Feistel 8 round Feistel

Recap Cont. Future Advances/4G Future Advances/4G LTE – 100 Mbps LTE – 100 Mbps WiMAX – 70 Mbps WiMAX – 70 Mbps

Questions?