Press Releases 2002

GSM ASSOCIATION WELCOMES FORMATION OF OPEN MOBILE ALLIANCE

GSM calls even more secure thanks to new A5/3 Algorithm

Sophia Antipolis, France – 1 July 2002 - A new security algorithm, known as A5/3, will provide users of GSM mobile phones with an even higher level of protection against eavesdropping than they have already. It will ensure that even if a prospective attacker manages to pull a GSM phone call out of the radio waves, he will be completely unable to make sense of it, even if he throws massive computing resources at the task.

A5/3 has been developed by a joint working party between the GSM Association Security Group and the 3rd Generation Partnership Project (3GPP™), for use in GSM™ systems. It will also be useable for the General Packet Radio Service (GPRS) where it will be known as GEA3, and other GSM modes such as High Speed Circuit Switched Data (HSCSD) and Enhanced Data Rates for GSM Evolution (EDGE).

GSM systems use several security elements, designed to safeguard the interests of the user, network operators and service providers. The A5/3 encryption algorithm specifically supplies signalling protection, so that sensitive information such as telephone numbers is protected over the radio path, and user data protection, to protect voice calls and other user generated data passing over the radio path.

Encryption algorithms are complex mathematical data scrambling operations implemented in software or hardware to protect data against unauthorised reading. A5/3 joins an existing family of GSM A5 algorithms: these are implemented in hardware to ensure an appropriately fast operation, and are contained within the mobile handset.

Since the original GSM A5 algorithm was developed in 1987, the climate for cryptography has changed substantially, due largely to more relaxed attitudes on the part of national security agencies – removing much of the traditional "hush-hush" approach to cryptography. The algorithm's developers concluded that the time was right to exploit this more creative state of affairs and enhance the already very high security of GSM algorithms.

The new algorithm was designed by the Security Algorithms Group of Experts (SAGE) of the European Telecommunications Standards Institute (ETSI), based on a requirements specification produced by 3GPP's Working Group SA3. The development was carried out with the support of the GSM Association, 3GPP, and the United States' T1 Standards Committee, sponsored by the Alliance for Telecommunications Industry Solutions (ATIS). A5/3 is based on the Kasumi algorithm, specified by 3GPP for use in 3rd Generation mobile systems as the core of confidentiality and integrity algorithms. Kasumi in turn was derived from the MISTY algorithm, created by Mitsubishi. The defining specifications are publicly available on the 3GPP web site.

Professor Michael Walker of Vodafone Group plc, Chairman of the 3GPP SA3 group, remarked: "We now have an encryption algorithm for GSM which has been expertly designed and analyzed for use in mobile communications, and which, with the more relaxed attitudes to cryptography, can be openly published."

Charles Brookson, Chairman of the GSM Association Security Group, said: "GSM security has proved to be remarkably resilient for a design 15 years old, but with the availability of stronger algorithms, and the ability to use them, it is time that GSM should offer similar levels of strength where the standards allow this."

It is expected that the algorithm will be publicly available from the third quarter of 2002 and will then be progressively implemented in mobile systems. Its developers have invited its further evaluation by industry. Industry parties wishing to implement the algorithm, should contact ETSI, the GSM Association, or Committee T1.

NOTES TO EDITORS

About 3GPP
The 3rd Generation Partnership Project (3GPP) was established for the preparation and maintenance of a complete set of globally applicable technical specifications for a Third Generation mobile system based on the evolved GSM core networks and the radio access technologies supported by 3GPPTM partners. 3GPP membership consists of three categories – Organizational Partners, Market Representation Partners and Individual Member companies.
More than 450 companies from around the world now participate actively as Individual Members of 3GPP. 3GPP web site: http://www.3gpp.org

3GPP is a Trade Mark of ETSI registered for the benefit of the 3GPP Organizational Partners.

About ETSI
ETSI (the European Telecommunications Standards Institute) is a non-profit-making, independent organization whose mission is to produce the telecommunications standards that will be used for decades to come throughout Europe and beyond. It is a founding Partner of 3GPP.

Based in Sophia Antipolis (France), ETSI unites 913 members from 54 countries inside and outside Europe, and represents manufacturers, network operators, administrations, service providers, research bodies and users. ETSI plays a major role in developing a wide range of standards and other technical documentation as Europe's contribution to world-wide standardization in telecommunications, broadcasting and information technology. ETSI's prime objective is to support global harmonization by providing a forum in which all the key players can contribute actively. ETSI is officially recognized by the European Commission and the European Free Trade Association (EFTA). ETSI web site: http://www.etsi.org

ETSI SAGE (Security Algorithms Group of Experts) is the technical committee within ETSI responsible for the design of all cryptographic algorithms used in ETSI standards.

About the GSM Association
The GSM Association (GSMA) is the world's leading wireless industry representative body. It consists of more than 637 second and third generation wireless network operators working collaboratively to define, prioritize and communicate requirements, as well as key manufacturers and suppliers to the wireless industry. The Association's members provide digital wireless services to more than 694 million customers (end May 2002).

The GSM family of wireless communications platforms account for approximately 71 percent of the total digital wireless market today. The GSM Association is a unique organization, with truly global reach, offering a full range of business and technical services to its members. Its vision is of a seamless, limitless, world of wireless communications. The GSM Association and its members work closely with the 3GPP - providing operator requirements into the development of standards. In addition, the GSMA has a direct relationship as a 3GPP Market Representation Partner.

GSM, Global System for Mobile Communications and the GSM logo are registered trademarks of the GSM Association

About Standards Committee T1
Standards Committee T1 develops American National Standards, technical reports and technical requirements for telecommunications services, network interconnection, interoperability, and performance. Committee T1 provides technical input to the United States Department of State supporting U.S. participation in international standards bodies.

More than 1,200 telecommunications engineers and technologists bring their expertise to Committee T1's six technical subcommittees. Committee T1 is a founding member of the Global Standards Collaboration (GSC) group of regional standards development organizations and works closely with the U.S. Federal Communications Commission on network reliability issues.

The American National Standards Institute (ANSI) accredits committee T1. More information is available by visiting the Committee T1 Web site at www.t1.org. Committee T1 documents are available at the ATIS Document Center, located at http://www.atis.org

Back to the Press Release Index