4 ms·
> Galileo’s open service (civil-access) E1 signal incorporates public/private key encryption to digitally sign and authentify data Which is fairly useless.
by londons_explore 1y ago
> Galileo’s open service (civil-access) E1 signal incorporates public/private key encryption to digitally sign and authentify data
Which is fairly useless. The spoofed data can be legit data just selectively delayed by a couple of milliseconds and the receiver has no way to know.
- rlpb 1y agoIs that actually true here? Satellite constellations move in complicated ways, so a receiver should be able to detect "impossible" configurations if the stream from only one satellite is delayed. If they are all delayed, then wouldn't that also cause the receiver's position to fail to resolve?
- londons_explore 1y agoAn attacker can receive all streams, delay the data from each satellite a variable amount, then retransmit them all again to appear to be in a different location. Then also delay signals from other gnss providers to match. I have witnessed this done in Iraq, so someone has already built the capability.
- rlpb 1y agoA variable amount is what I was missing. That makes sense now, thanks.
- SteveNuts 1y agoIs that some sort of a replay attack? If so why isn't the timestamp embedded in the encrypted payload
- londons_explore 1y agoIt is. It relies on the fact the clients clock will have a few milliseconds of error so they'll be unable to detect it. If the client had an atomic clock, this attack wouldn't be possible.